A flaw was found in GLib. An off-by-one error can occur in the g_key_file_get_locale_string_list function in the gkeyfile.c file when loading a key file with an empty value. This flaw can cause an out-of-bounds access of 1 byte or a denial of service when the out-of-bounds access crosses a page boundary.
| Version | Score | Severity | Vector String |
|---|---|---|---|
| 3.1 | 7.3 | High | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L |
| Product | Vendor | Version |
|---|---|---|
| Red Hat Enterprise Linux 7 | Red Hat | Prior to iMC PLAT 7.3 (E0705P07) |
| Red Hat Enterprise Linux 8 | Red Hat | n/a |
| Red Hat Enterprise Linux 9 | Red Hat | n/a |
| Red Hat Hardened Images | Red Hat | 20.0.0.3 |
| Red Hat Enterprise Linux 8 | Red Hat | < 10.15 |
| Red Hat Enterprise Linux 9 | Red Hat | 17.0.0.3 |