REDHAT-BUG-2421339: Buffer Overflow
This vulnerability stems from an integer overflow in GLib’s GIO escapebytestring() function, where the count of invalid characters is multiplied using a signed integer, resulting in a too-small memory allocation for escaped output. When a malicious file or remote filesystem supplies attribute values with a large number of invalid bytes, the subsequent escaping loop writes beyond the allocated buffer, triggering a heap buffer overflow and crashing the process.
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-2421339?
The severity of REDHAT-BUG-2421339 is classified as high due to the potential for denial of service and exploitation risks from the integer overflow.
How do I fix REDHAT-BUG-2421339?
To fix REDHAT-BUG-2421339, ensure your system is updated with the latest patches provided by Red Hat.
Which systems are affected by REDHAT-BUG-2421339?
REDHAT-BUG-2421339 affects systems using GLib's GIO library, particularly those utilizing the escape_byte_string() function.
What exploit scenarios are associated with REDHAT-BUG-2421339?
Exploitation scenarios for REDHAT-BUG-2421339 include remote attackers supplying specially crafted files that trigger the integer overflow.
Is there a workaround for REDHAT-BUG-2421339?
Currently, there is no official workaround for REDHAT-BUG-2421339, and the recommended action is to apply the available security updates.