CVE-2019-9633: Medium severity glib vulnerability

Published Mar 8, 2019

Updated

gio/gsocketclient.c in GNOME GLib 2.59.2 does not ensure that a parent GTask remains alive during the execution of a connection-attempting enumeration, which allows remote attackers to cause a denial of service (gsocketclientconnectedcallback mishandling and application crash) via a crafted web site, as demonstrated by GNOME Web (aka Epiphany).

Affected Software

1 affected component

Gnome GLib=2.59.2

Event History

Mar 8, 2019

CVE Published

via MITRE·07:00 AM

Data Sourced

via MITRE·07:00 AM

Description

Data Sourced

via NVD·08:29 AM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is CVE-2019-9633?

CVE-2019-9633 is a vulnerability in GNOME GLib 2.59.2 that allows remote attackers to cause a denial of service and application crash.

How does CVE-2019-9633 impact GNOME GLib 2.59.2?

CVE-2019-9633 can cause a denial of service and application crash in GNOME GLib 2.59.2.

What is the severity of CVE-2019-9633?

CVE-2019-9633 has a severity rating of medium with a score of 6.5.

How can I fix CVE-2019-9633 in GNOME GLib 2.59.2?

To fix CVE-2019-9633 in GNOME GLib 2.59.2, it is recommended to update to a patched version of the software.

Where can I find more information about CVE-2019-9633?

You can find more information about CVE-2019-9633 on the following websites: http://www.securityfocus.com/bid/107391, https://gitlab.gnome.org/GNOME/glib/issues/1649