Summary
Krzesimir Nowak discovered that GLib incorrectly handled certain large
buffers. A remote attacker could use this issue to cause applications
linked to GLib to crash, resulting in a denial of service, or possibly
execute arbitrary code. (CVE-2021-27218)
Kevin Backhouse discovered that GLib incorrectly handled certain memory
allocations. A remote attacker could use this issue to cause applications
linked to GLib to crash, resulting in a denial of service, or possibly
execute arbitrary code. (CVE-2021-27219)
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 16.04 LTS 16.04:LTS | glib2.0 | 2.48.2-0ubuntu4.7 |
| Ubuntu · 18.04 LTS 18.04:LTS | glib2.0 | 2.56.4-0ubuntu0.18.04.7 |
| Ubuntu · 20.04 LTS 20.04:LTS | glib2.0 | 2.64.6-1~ubuntu20.04.2 |
Vulnerabilities 2
-
Unscored —
An issue was discovered in GNOME GLib before 2.66.7 and 2.67.x before 2.67.4. If g_byte_array_new_take() was called wit…
-
Unscored —
An issue was discovered in GNOME GLib before 2.66.6 and 2.67.x before 2.67.3. The function g_bytes_new has an integer o…