REDHAT-BUG-2416741: Medium severity Gnome GLib vulnerability
An overflow problem was found in glib through an incorrect calculation of buffer size in the gescapeuristring() function. If the string to escape contains a very large number of unacceptable characters (which would need escaping), the calculation of the length of the escaped string could overflow, leading to a potential write off the end of the newly allocated string.
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-2416741?
The severity of REDHAT-BUG-2416741 is classified as a vulnerability due to potential overflow issues in glib.
How do I fix REDHAT-BUG-2416741?
To fix REDHAT-BUG-2416741, you should update glib to the latest version that addresses this overflow issue.
What versions of glib are affected by REDHAT-BUG-2416741?
All versions of glib that include the g_escape_uri_string() function and are susceptible to the overflow issue are affected by REDHAT-BUG-2416741.
Can REDHAT-BUG-2416741 lead to remote code execution?
Yes, REDHAT-BUG-2416741 can potentially lead to remote code execution if exploited by an attacker.
What does the g_escape_uri_string() function do in relation to REDHAT-BUG-2416741?
The g_escape_uri_string() function is intended to escape unacceptable characters in a URI, but due to a vulnerability, it can incorrectly calculate buffer sizes, leading to overflow.