CVE-2021-27218
High
Description
An issue was discovered in GNOME GLib before 2.66.7 and 2.67.x before 2.67.4. If g_byte_array_new_take() was called with a buffer of 4GB or more on a 64-bit platform, the length would be truncated modulo 2**32, causing unintended length truncation.
SeverityHigh
CVSS7.5
Exploit probability—
Product
Gnome Glib
PublishedFeb 15, 2021
First seenFeb 15, 2021
How to fix
Update
- gnome glib2.66.7, 2.67.4 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| gnome glib | v < 2.66.7, 2.67.0 ≤ v < 2.67.4 | 2.66.7, 2.67.4 |
| fedoraproject fedora | 33, 34 | — |
| netapp active_iq_unified_manager | No range specified | — |
| netapp cloud_backup | No range specified | — |
| netapp e-series_performance_analyzer | No range specified | — |
| broadcom brocade_fabric_operating_system_firmware | No range specified | — |
| debian debian_linux | 9.0 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.