REDHAT-BUG-2357754: Low severity Gnome GLib vulnerability
Published Apr 7, 2025
·Updated
GLib prior to 2.82.5 is vulnerable to integer overflow and buffer under-read when parsing a very long invalid ISO 8601 timestamp with gdatetimenewfromiso8601().
Affected Software
1 affected component
Gnome GLib<2.82.5
Event History
Apr 7, 2025
Data Sourced
via Red Hat·01:51 AM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of REDHAT-BUG-2357754?
The severity of REDHAT-BUG-2357754 is considered high due to the potential for integer overflow and buffer under-read vulnerabilities.
2
How do I fix REDHAT-BUG-2357754?
To fix REDHAT-BUG-2357754, upgrade GLib to version 2.82.5 or later.
3
What versions of GLib are affected by REDHAT-BUG-2357754?
GLib versions prior to 2.82.5 are affected by REDHAT-BUG-2357754.
4
What kind of vulnerability is REDHAT-BUG-2357754?
REDHAT-BUG-2357754 is an integer overflow and buffer under-read vulnerability.
5
How does REDHAT-BUG-2357754 impact applications using GLib?
REDHAT-BUG-2357754 can lead to application crashes or exploitation when handling invalid ISO 8601 timestamps.