REDHAT-BUG-2429886: Buffer Overflow
Integer Overflow vulnerability in the gbufferedinputstreampeek() function of the GLib library. The issue is caused by missing validation of the offset and count parameters, leading to an unsafe arithmetic operation during length calculation. When specially crafted values are provided, the offset + count computation may overflow, resulting in an incorrect size being passed to memcpy(). This can trigger a heap or stack buffer overflow and lead to a segmentation fault. Exploitation is subject to strict preconditions and primarily impacts availability by causing application crashes.
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-2429886?
The severity of REDHAT-BUG-2429886 is classified as a significant security issue due to the potential for integer overflow leading to unsafe operations.
How do I fix REDHAT-BUG-2429886?
To fix REDHAT-BUG-2429886, you should update the affected GLib library to a patched version that implements proper validation of the offset and count parameters.
What is the cause of REDHAT-BUG-2429886?
REDHAT-BUG-2429886 is caused by the lack of validation in the g_buffered_input_stream_peek() function's offset and count parameters.
Which versions of GLib are affected by REDHAT-BUG-2429886?
All versions of GLib that rely on the g_buffered_input_stream_peek() function are potentially affected by REDHAT-BUG-2429886.
What damage can REDHAT-BUG-2429886 cause if exploited?
If exploited, REDHAT-BUG-2429886 can lead to arbitrary code execution, application crashes, or exposure of sensitive information due to unsafe arithmetic operations.