« List of all CVEs

CVE-2023-32611

G_variant_byteswap() can take a long time with some non-normal inputs

Published: 9/14/2023 Last updated: 6/23/2026 Reserved: 5/30/2023

A flaw was found in GLib. GVariant deserialization is vulnerable to a slowdown issue where a crafted GVariant can cause excessive processing, leading to denial of service.

CNA assigner: redhat (53f830b8-0a3f-465b-8143-3b8a9948e749) Requested by: n/a

Metrics

Version Score Severity Vector String
3.1 5.5 Medium CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Opam packages affected (1)

conf-glib-2

Products affected (20)

Product Vendor Version
Extra Packages for Enterprise Linux Fedora < 1.5.68
Extra Packages for Enterprise Linux Fedora 2019
Red Hat Enterprise Linux 7 Red Hat n/a
Red Hat Enterprise Linux 8 Red Hat n/a
Red Hat Enterprise Linux 9 Red Hat 2.0.2
Fedora 37 Fedora unspecified
Fedora 38 Fedora unspecified
Red Hat Enterprise Linux 6 Red Hat Android kernel
Red Hat Enterprise Linux 7 Red Hat 10 Version 1809 for x64-based Systems
Red Hat Enterprise Linux 8 Red Hat 10 for x64-based Systems
Red Hat Enterprise Linux 9 Red Hat 8.1 for x64-based systems
Fedora 37 Fedora < 14.7
Fedora 38 Fedora < 11.5
Red Hat Enterprise Linux 6 Red Hat n/a
Fedora 37 Fedora < 2021
Fedora 37 Fedora 2008 for x64-based Systems Service Pack 2
Fedora 38 Fedora < 6.0.18 ( 2021/09/01 )
Fedora 38 Fedora 2016 (Core installation)
glib2 n/a 1.0.1
glib2 n/a >= 2.4.0, < 2.4.2

References (24)

Credits (2)