CVE-2024-52533: Buffer overflow in socks proxy code in glib < 2.82.1
gio/gsocks4aproxy.c in GNOME GLib before 2.82.1 has an off-by-one error and resultant buffer overflow because SOCKS4CONNMSGLEN is not sufficient for a trailing '\0' character.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/glib2.0to a version that resolves this vulnerability.Fixed in 2.74.6-2+deb12u5 - Upgrade
Upgrade
debian/glib2.0to a version that resolves this vulnerability.Fixed in 2.82.1-1 - Upgrade
Upgrade
debian/glib2.0to a version that resolves this vulnerability.Fixed in 2.74.6-2+deb12u9Fixed in 2.84.4-3~deb13u5Fixed in 2.90.1-2 - Upgrade
Upgrade
glib (GNOME GLib)to a version that resolves this vulnerability.Fixed in 2.82.1
Event History
Frequently Asked Questions
What is the severity of CVE-2024-52533?
CVE-2024-52533 is classified as a high severity vulnerability due to the potential for a buffer overflow.
How do I fix CVE-2024-52533?
To fix CVE-2024-52533, upgrade to glib2.0 versions 2.82.2-2 or 2.82.2-3.
Which versions of GNOME GLib are affected by CVE-2024-52533?
CVE-2024-52533 affects GNOME GLib versions prior to 2.82.1.
What type of vulnerability is CVE-2024-52533?
CVE-2024-52533 is an off-by-one error leading to a buffer overflow.
What can happen if CVE-2024-52533 is exploited?
Exploitation of CVE-2024-52533 may allow an attacker to execute arbitrary code in the context of the affected application.