CVE-2023-32643: Buffer Overflow
Published Jun 7, 2023
·Updated
A flaw was found in GLib. The GVariant deserialization code is vulnerable to a heap buffer overflow introduced by the fix for CVE-2023-32665. This bug does not affect any released version of GLib, but does affect GLib distributors who followed the guidance of GLib developers to backport the initial fix for CVE-2023-32665.
Affected Software
9 affected componentsFixes available
ubuntu/glib2.0<2.40.2-0ubuntu1.1+
2.40.2-0ubuntu1.1+
ubuntu/glib2.0<2.64.6-1~ubuntu20.04.6
2.64.6-1~ubuntu20.04.6
ubuntu/glib2.0<2.72.4-0ubuntu2.2
2.72.4-0ubuntu2.2
ubuntu/glib2.0<2.74.3-0ubuntu1.2
2.74.3-0ubuntu1.2
ubuntu/glib2.0<2.75.1, <2.74.4
2.75.12.74.4
ubuntu/glib2.0<2.56.4-0ubuntu0.18.04.9+
2.56.4-0ubuntu0.18.04.9+
ubuntu/glib2.0<2.48.2-0ubuntu4.8+
2.48.2-0ubuntu4.8+
debian/glib2.0
2.58.3-2+deb10u32.58.3-2+deb10u52.66.8-1+deb11u12.74.6-22.78.4-12.78.4-3
Gnome GLib<2.75.1
Remediation
Patch Available
Event History
Jun 7, 2023
CVE Published
via Ubuntu·12:00 AM
Sep 14, 2023
CVE Published
via MITRE·07:14 PM
Data Sourced
via MITRE·07:14 PM
DescriptionSeverityWeakness
Jan 12, 2024
Data Sourced
via Launchpad·12:20 AM
Description
Frequently Asked Questions
1
What is the vulnerability ID for this flaw in GLib?
The vulnerability ID for this flaw in GLib is CVE-2023-32643.
2
What is the severity rating of CVE-2023-32643?
CVE-2023-32643 has a severity rating of 7.8 (high).
3
Which software is affected by CVE-2023-32643?
The Gnome Glib software versions up to 2.75.1 are affected by CVE-2023-32643.
4
What is the root cause of CVE-2023-32643?
The root cause of CVE-2023-32643 is a heap buffer overflow introduced by the fix for CVE-2023-32665.
5
What is the recommended solution for CVE-2023-32643?
Upgrade to a version of GLib that is not affected by the vulnerability.