GNOME GLib 2.56.1 has an out-of-bounds read vulnerability in g_markup_parse_context_parse() in gmarkup.c, related to utf8_str().

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - glib2: NULL pointer dereference in g_markup_parse_context_end_parse() function in gmarkup.c     (CVE-2018-16428)

  - GNOME GLib 2.56.1 has an out-of-bounds read vulnerability in g_markup_parse_context_parse() in gmarkup.c,     related to utf8_str(). (CVE-2018-16429)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - glib2: NULL pointer dereference in g_markup_parse_context_end_parse() function in gmarkup.c     (CVE-2018-16428)

  - GNOME GLib 2.56.1 has an out-of-bounds read vulnerability in g_markup_parse_context_parse() in gmarkup.c,     related to utf8_str(). (CVE-2018-16429)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - glib2: NULL pointer dereference in g_markup_parse_context_end_parse() function in gmarkup.c     (CVE-2018-16428)

  - GNOME GLib 2.56.1 has an out-of-bounds read vulnerability in g_markup_parse_context_parse() in gmarkup.c,     related to utf8_str(). (CVE-2018-16429)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

This plugin has been deprecated as it does not adhere to established standards for this style of check.

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3767-1 advisory.

    It was discovered that GLib incorrectly handled certain files. An attacker could possibly use this issue     to cause a denial of service or execute arbitrary code. (CVE-2018-16428)

    It was discovered that GLib incorrectly handled certain files. An attacker could possibly use this issue     to access sensitive information. (CVE-2018-16429)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of glib2 installed on the remote host is prior to 2.36.3-5.24. It is, therefore, affected by a vulnerability as referenced in the ALAS-2023-1749 advisory.

    GNOME GLib 2.56.1 has an out-of-bounds read vulnerability in g_markup_parse_context_parse() in gmarkup.c,     related to utf8_str(). (CVE-2018-16429)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of glib2 installed on the remote host is prior to 2.56.1-9. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2023-2049 advisory.

    In GNOME GLib 2.56.1, g_markup_parse_context_end_parse() in gmarkup.c has a NULL pointer dereference.
    (CVE-2018-16428)

    GNOME GLib 2.56.1 has an out-of-bounds read vulnerability in g_markup_parse_context_parse() in gmarkup.c,     related to utf8_str(). (CVE-2018-16429)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of glib2 installed on the remote host is prior to 2.36.3-5.23. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2023-1742 advisory.

    In GNOME GLib 2.56.1, g_markup_parse_context_end_parse() in gmarkup.c has a NULL pointer dereference.
    (CVE-2018-16428)

    GNOME GLib 2.56.1 has an out-of-bounds read vulnerability in g_markup_parse_context_parse() in gmarkup.c,     related to utf8_str(). (CVE-2018-16429)

    The keyfile settings backend in GNOME GLib (aka glib2.0) before 2.60.0 creates directories using     g_file_make_directory_with_parents (kfsb->dir, NULL, NULL) and files using g_file_replace_contents     (kfsb->file, contents, length, NULL, FALSE, G_FILE_CREATE_REPLACE_DESTINATION, NULL, NULL, NULL).
    Consequently, it does not properly restrict directory (and file) permissions. Instead, for directories,     0777 permissions are used; for files, default file permissions are used. This is similar to     CVE-2019-12450. (CVE-2019-13012)

    An issue was discovered in GNOME GLib before 2.66.8. When g_file_replace() is used with     G_FILE_CREATE_REPLACE_DESTINATION to replace a path that is a dangling symlink, it incorrectly also     creates the target of the symlink as an empty file, which could conceivably have security relevance if the     symlink is attacker-controlled. (If the path is a symlink to a file that already exists, then the contents     of that file correctly remain unchanged.) (CVE-2021-28153)

    A flaw was found in glib before version 2.63.6. Due to random charset alias, pkexec can leak content from     files owned by privileged users to unprivileged ones under the right condition. (CVE-2021-3800)

    The upstream bug report describes this issue as follows:

    A vulnerability was found in GLib2.0, where DoS caused by handling a malicious text-form variant which is     structured to cause looping superlinear to its text size. Applications are at risk if they parse untrusted     text-form variants. (CVE-2023-24593)

    The upstream bug report describes this issue as follows:

    A vulnerability was found in GLib2.0, where DoS caused by handling a malicious text-form variant which is     structured to cause looping superlinear to its text size. Applications are at risk if they parse untrusted     text-form variants. (CVE-2023-25180)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the version of the glib2 packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability :

  - GNOME GLib 2.56.1 has an out-of-bounds read     vulnerability in g_markup_parse_context_parse() in     gmarkup.c, related to utf8_str().(CVE-2018-16429)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the glib2 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - The keyfile settings backend in GNOME GLib (aka     glib2.0) before 2.60.0 creates directories using     g_file_make_directory_with_parents (kfsb->dir, NULL,     NULL) and files using g_file_replace_contents     (kfsb->file, contents, length, NULL, FALSE,     G_FILE_CREATE_REPLACE_DESTINATION, NULL, NULL, NULL).
    Consequently, it does not properly restrict directory     (and file) permissions. Instead, for directories, 0777     permissions are used for files, default file     permissions are used. This is similar to     CVE-2019-12450.(CVE-2019-13012)

  - file_copy_fallback in gio/gfile.c in GNOME GLib 2.15.0     through 2.61.1 does not properly restrict file     permissions while a copy operation is in progress.
    Instead, default permissions are used.(CVE-2019-12450)

  - GNOME GLib 2.56.1 has an out-of-bounds read     vulnerability in g_markup_parse_context_parse() in     gmarkup.c, related to utf8_str().(CVE-2018-16429)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the glib2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - GNOME GLib 2.56.1 has an out-of-bounds read     vulnerability in g_markup_parse_context_parse() in     gmarkup.c, related to utf8_str().(CVE-2018-16429)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the glib2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - gio/gsocketclient.c in GNOME GLib 2.59.2 does not     ensure that a parent GTask remains alive during the     execution of a connection-attempting enumeration, which     allows remote attackers to cause a denial of service     (g_socket_client_connected_callback mishandling and     application crash) via a crafted web site, as     demonstrated by GNOME Web (aka     Epiphany).(CVE-2019-9633)

  - GNOME GLib 2.56.1 has an out-of-bounds read     vulnerability in g_markup_parse_context_parse() in     gmarkup.c, related to utf8_str().(CVE-2018-16429)

  - In GNOME GLib 2.56.1,     g_markup_parse_context_end_parse() in gmarkup.c has a     NULL pointer dereference.(CVE-2018-16428)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the glib2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - In GNOME GLib 2.56.1,     g_markup_parse_context_end_parse() in gmarkup.c has a     NULL pointer dereference.(CVE-2018-16428)

  - GNOME GLib 2.56.1 has an out-of-bounds read     vulnerability in g_markup_parse_context_parse() in     gmarkup.c, related to utf8_str().(CVE-2018-16429)

  - gio/gsocketclient.c in GNOME GLib 2.59.2 does not     ensure that a parent GTask remains alive during the     execution of a connection-attempting enumeration, which     allows remote attackers to cause a denial of service     (g_socket_client_connected_callback mishandling and     application crash) via a crafted web site, as     demonstrated by GNOME Web (aka     Epiphany).(CVE-2019-9633)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for glib2 provides the following fix :

Security issues fixed :

CVE-2019-12450: Fixed an improper file permission when copy operation takes place (bsc#1137001).

CVE-2018-16428: Avoid a NULL pointer dereference that could crash glib2 users in markup processing (bnc#1107121).

CVE-2018-16429: Fixed out-of-bounds read vulnerability ing_markup_parse_context_parse() (bsc#1107116).

Non-security issues fixed: Install dummy *-mimeapps.list files to prevent dead symlinks. (bsc#1061599)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for glib2 fixes the following issues :

Security issues fixed :

CVE-2019-12450: Fixed an improper file permission when copy operation takes place (bsc#1137001).

CVE-2018-16428: Avoid a NULL pointer dereference (bsc#1107121).

CVE-2018-16429: Fixed out-of-bounds read vulnerability ing_markup_parse_context_parse() (bsc#1107116).

Some exploitable parser bugs in GVariant and GDBus subsystems were fixed (bsc#1111499).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for glib2 fixes the following issues :

Security issues fixed :

  - CVE-2018-16428: Do not do a NULL pointer dereference     (crash). Avoid that, at the cost of introducing a new     translatable error message (bsc#1107121).

  - CVE-2018-16429: Fixed out-of-bounds read vulnerability     ing_markup_parse_context_parse() (bsc#1107116).

Non-security issue fixed :

  - various GVariant parsing issues have been resolved     (bsc#1111499)

This update was imported from the SUSE:SLE-15:Update update project.

An update of the glib package has been released.

Security fixes for CVE-2018-6055 CVE-2018-6119 CVE-2018-16429 CVE-2018-16428

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Security fixes for CVE-2018-6055 CVE-2018-6119 CVE-2018-16429 CVE-2018-16428

----

Update to Chromium 69. (EPEL-7 update is blocked by a GCC bug:
1629813, so as soon as devtoolset-8 arrives...)

Fixes a lot of security issues, like every major release of Chromium, including CVE-2018-16087 CVE-2018-16088 CVE-2018-16086CVE-2018-16065 CVE-2018-16066 CVE-2018-16067 CVE-2018-16068 CVE-2018-16069 CVE-2018-16070 CVE-2018-16071 CVE-2018-16072 CVE-2018-16073 CVE-2018-16074 CVE-2018-16075 CVE-2018-16076 CVE-2018-16077 CVE-2018-16078

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for glib2 fixes the following issues :

Security issues fixed :

CVE-2018-16428: Do not do a NULL pointer dereference (crash). Avoid that, at the cost of introducing a new translatable error message (bsc#1107121).

CVE-2018-16429: Fixed out-of-bounds read vulnerability ing_markup_parse_context_parse() (bsc#1107116).

Non-security issue fixed: various GVariant parsing issues have been resolved (bsc#1111499)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for glib2 fixes the following issues :

Security issues fixed :

CVE-2018-16429: Fixed out-of-bounds read vulnerability ing_markup_parse_context_parse() (bsc#1107116).

Fixing potentially exploitable bugs in UTF-8 validation in Variant and DBUS message parsing (bsc#1111499).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
198852	RHEL 6 : glib2 (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	critical
198783	RHEL 7 : glib2 (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	critical
198746	RHEL 5 : glib2 (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	critical
196082	RHEL 7 : glib2 (Unpatched Vulnerability) (deprecated)	Nessus	Red Hat Local Security Checks	critical
196065	RHEL 5 : glib2 (Unpatched Vulnerability) (deprecated)	Nessus	Red Hat Local Security Checks	critical
195992	RHEL 6 : glib2 (Unpatched Vulnerability) (deprecated)	Nessus	Red Hat Local Security Checks	critical
183598	Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS : GLib vulnerabilities (USN-3767-1)	Nessus	Ubuntu Local Security Checks	critical
176266	Amazon Linux AMI : glib2 (ALAS-2023-1749)	Nessus	Amazon Linux Local Security Checks	high
175955	Amazon Linux 2 : glib2 (ALAS-2023-2049)	Nessus	Amazon Linux Local Security Checks	critical
175096	Amazon Linux AMI : glib2 (ALAS-2023-1742)	Nessus	Amazon Linux Local Security Checks	critical
136223	EulerOS Virtualization for ARM 64 3.0.2.0 : glib2 (EulerOS-SA-2020-1520)	Nessus	Huawei Local Security Checks	high
135618	EulerOS Virtualization 3.0.2.2 : glib2 (EulerOS-SA-2020-1456)	Nessus	Huawei Local Security Checks	critical
132357	EulerOS 2.0 SP5 : glib2 (EulerOS-SA-2019-2690)	Nessus	Huawei Local Security Checks	high
132123	EulerOS 2.0 SP3 : glib2 (EulerOS-SA-2019-2588)	Nessus	Huawei Local Security Checks	critical
131901	EulerOS 2.0 SP2 : glib2 (EulerOS-SA-2019-2409)	Nessus	Huawei Local Security Checks	critical
126461	SUSE SLED12 / SLES12 Security Update : glib2 (SUSE-SU-2019:1722-1)	Nessus	SuSE Local Security Checks	critical
126152	SUSE SLES12 Security Update : glib2 (SUSE-SU-2019:1596-1)	Nessus	SuSE Local Security Checks	critical
123388	openSUSE Security Update : glib2 (openSUSE-2019-959)	Nessus	SuSE Local Security Checks	critical
122004	Photon OS 2.0: Glib PHSA-2018-2.0-0108	Nessus	PhotonOS Local Security Checks	critical
121896	Photon OS 1.0: Glib PHSA-2018-1.0-0194	Nessus	PhotonOS Local Security Checks	critical
120923	Fedora 28 : chromium (2018-f76e6d17f1)	Nessus	Fedora Local Security Checks	critical
120356	Fedora 29 : chromium (2018-39be36e9fc)	Nessus	Fedora Local Security Checks	critical
120169	SUSE SLED15 / SLES15 Security Update : glib2 (SUSE-SU-2018:3913-1)	Nessus	SuSE Local Security Checks	critical
119493	openSUSE Security Update : glib2 (openSUSE-2018-1485)	Nessus	SuSE Local Security Checks	critical
119334	SUSE SLES11 Security Update : glib2 (SUSE-SU-2018:3966-1)	Nessus	SuSE Local Security Checks	high

Detections

Analytics

CVE-2018-16429

high

Tenable Plugins

critical

critical

critical

critical

critical

critical

critical

high

critical

critical

high

critical

high

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

high