NOTE: versions before 2.60 are unaffected. The greatest security relevance is in use cases where a proxy is used to help with privacy/anonymity, even though there is no technical barrier to a direct connection. This bug is timing-dependent and may occur only sporadically depending on network delays.
GSocketClient in GNOME GLib through 2.62.4 may occasionally connect directly to a target address instead of connecting via a proxy server when configured to do so, because the proxy_addr field is mishandled. The standard pattern is for callers to provide a static list of option entries in a fixed number of calls to g_option_group_add_entries()." The researcher states that this pattern is undocumented. NOTE: the vendor's position is "Realistically this is not a security issue. ** DISPUTED ** GNOME GLib before 2.65.3 has an integer overflow, that might lead to an out-of-bounds write, in g_option_group_add_entries. If g_byte_array_new_take() was called with a buffer of 4GB or more on a 64-bit platform, the length would be truncated modulo 2**32, causing unintended length truncation. The overflow could potentially lead to memory corruption.Īn issue was discovered in GNOME GLib before 2.66.7 and 2.67.x before 2.67.4.
#MEDIALINK MWN WAPR300N 64 BITS#
The function g_bytes_new has an integer overflow on 64-bit platforms due to an implicit cast from 64 bits to 32 bits. (If the path is a symlink to a file that already exists, then the contents of that file correctly remain unchanged.)Īn issue was discovered in GNOME GLib before 2.66.6 and 2.67.x before 2.67.3. When g_file_replace() is used with G_FILE_CREATE_REPLACE_DESTINATION to replace a path that is a dangling symlink, it incorrectly also creates the target of the symlink as an empty file, which could conceivably have security relevance if the symlink is attacker-controlled. Due to random charset alias, pkexec can leak content from files owned by privileged users to unprivileged ones under the right condition.Īn issue was discovered in GNOME GLib before 2.66.8. A flaw was found in glib before version 2.63.6.
0 kommentar(er)
