Debian: CVE-2024-52533: glib2.0 -- security update

Debian: CVE-2024-52533: glib2.0 -- security update

Severity

4

CVSS

(AV:L/AC:M/Au:N/C:P/I:P/A:P)

Published

11/11/2024

Created

12/03/2024

Added

12/02/2024

Modified

12/02/2024

Description

gio/gsocks4aproxy.c in GNOME GLib before 2.82.1 has an off-by-one error and resultant buffer overflow because SOCKS4_CONN_MSG_LEN is not sufficient for a trailing '\0' character.

Solution(s)

• debian-upgrade-glib2-0

References

• https://attackerkb.com/topics/cve-2024-52533
• CVE - 2024-52533
• DLA-3962-1