CVE-2020-35457
High
Description
GNOME GLib before 2.65.3 has an integer overflow, that might lead to an out-of-bounds write, in g_option_group_add_entries. NOTE: the vendor's position is "Realistically this is not a security issue. The standard pattern is for callers to provide a static list of option entries in a fixed number of calls to g_option_group_add_entries()." The researcher states that this pattern is undocumented
SeverityHigh
CVSS7.8
Exploit probability—
ProductGnome Glib
PublishedDec 14, 2020
First seenDec 14, 2020
How to fix
Update
- gnome glib2.65.3 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| gnome glib | v < 2.65.3 | 2.65.3 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.