REDHAT-BUG-2433259: Integer Overflow
Integer Overflow leads to Buffer Underflow vulnerability in GLib’s Base64 encoding implementation. The flaw is caused by storing the output length returned by gbase64encodestep() in a signed integer (gint). When encoding very large attacker-controlled input, this value may overflow and become negative. The resulting pointer arithmetic in gbase64encodeclose() leads to a buffer underflow and out-of-bounds heap write. Exploitation requires that an application passes untrusted or excessively large input to the Base64 encoding API and may result in application crashes or potential memory corruption.
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-2433259?
The severity of REDHAT-BUG-2433259 is considered high due to the potential for exploitation leading to buffer underflow and application crashes.
How do I fix REDHAT-BUG-2433259?
To fix REDHAT-BUG-2433259, update to the latest version of GNOME GLib where the vulnerability has been patched.
What software is affected by REDHAT-BUG-2433259?
REDHAT-BUG-2433259 affects GNOME GLib versions that utilize its Base64 encoding functionality.
What type of vulnerability is REDHAT-BUG-2433259?
REDHAT-BUG-2433259 is classified as an integer overflow vulnerability leading to buffer underflow.
What can an attacker do with REDHAT-BUG-2433259?
An attacker can exploit REDHAT-BUG-2433259 to potentially execute arbitrary code or cause denial of service through crafted input.