A flaw was found in GLib. GVariant deserialization is vulnerable to a slowdown issue where a crafted GVariant can cause excessive processing, leading to denial of service.
| Version | Score | Severity | Vector String |
|---|---|---|---|
| 3.1 | 5.5 | Medium | CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H |
| Product | Vendor | Version |
|---|---|---|
| Extra Packages for Enterprise Linux | Fedora | 8.0.0.1 |
| Red Hat Enterprise Linux 6 | Red Hat | <= 8.5.2 |
| Red Hat Enterprise Linux 7 | Red Hat | <= 6.9.* |
| Red Hat Enterprise Linux 8 | Red Hat | 7.0.0 |
| Red Hat Enterprise Linux 9 | Red Hat | 3.10.3S |
| Fedora 38 | Fedora | 3.10.2tS |
| Fedora 37 | Fedora | n/a |
| Fedora 37 | Fedora | 3.10.6S |
| Fedora 38 | Fedora | n/a |
| glib2 | n/a | < 6.6 |