gio/gsocks4aproxy.c in GNOME GLib before 2.82.1 has an off-by-one error and resultant buffer overflow because SOCKS4_CONN_MSG_LEN is not sufficient for a trailing '\0' character.

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-0936 advisory.

    [2.78.6-2]
    - Resolves: RHEL-67088 - CVE-2024-52533 mingw-glib2: buffer overflow in set_connect_msg()

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the glib2 package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    gio/gsocks4aproxy.c in GNOME GLib before 2.82.1 has an off-by-one error and resultant buffer overflow     because SOCKS4_CONN_MSG_LEN is not sufficient for a trailing '\0' character.(CVE-2024-52533)

Tenable has extracted the preceding description block directly from the EulerOS glib2 security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of glib installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-52533 advisory.

  - gio/gsocks4aproxy.c in GNOME GLib before 2.82.1 has an off-by-one error and resultant buffer overflow     because SOCKS4_CONN_MSG_LEN is not sufficient for a trailing '\0' character. (CVE-2024-52533)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2025:0936 advisory.

    * glib: buffer overflow in set_connect_msg() (CVE-2024-52533)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:0936 advisory.

    GLib provides the core application building blocks for libraries and applications written in C. It     provides the core object system used in GNOME, the main loop implementation, and a large set of utility     functions for strings and common data structures.

    Security Fix(es):

    * glib: buffer overflow in set_connect_msg() (CVE-2024-52533)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

An update of the glib package has been released.

The remote SUSE Linux SLES12 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2024:4051-2 advisory.

    - CVE-2024-52533: Fixed a single byte buffer overflow (bsc#1233282).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:4078-1 advisory.

    - CVE-2024-52533: Fixed a single byte buffer overflow (bsc#1233282).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2024:4051-1 advisory.

    - CVE-2024-52533: Fixed a single byte buffer overflow (bsc#1233282).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:4254-1 advisory.

    Security issues fixed:

    - CVE-2024-52533: Fix a single byte buffer overflow in set_connect_msg() (bsc#1233282).

    Non-security issue fixed:

    - Fix error when uninstalling packages (bsc#1231463).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-67869f1cb3 advisory.

    Update to 2.82.2, fixes CVE-2024-52533.

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-1e29ad7d25 advisory.

    Update to 2.82.2, fixes CVE-2024-52533.

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dla-3962 advisory.

    - -------------------------------------------------------------------------     Debian LTS Advisory DLA-3962-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                          Adrian Bunk     November 23, 2024                             https://wiki.debian.org/LTS
    - -------------------------------------------------------------------------

    Package        : glib2.0     Version        : 2.66.8-1+deb11u5     CVE ID         : CVE-2024-52533     Debian Bug     : 1087419

    A buffer overflow with long SOCKS4a proxy hostname and username has been     fixed in the GNOME Input/Output library (GIO).

    For Debian 11 bullseye, this problem has been fixed in version     2.66.8-1+deb11u5.

    We recommend that you upgrade your glib2.0 packages.

    For the detailed security status of glib2.0 please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/glib2.0

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-7114-1 advisory.

    It was discovered that Glib incorrectly handled certain trailing characters. An attacker could possibly     use this issue to cause a crash or other undefined behavior.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of glib installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-52533 advisory.

  - gio/gsocks4aproxy.c in GNOME GLib before 2.82.1 has an off-by-one error and resultant buffer overflow     because SOCKS4_CONN_MSG_LEN is not sufficient for a trailing '\0' character. (CVE-2024-52533)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:3998-1 advisory.

    - CVE-2024-52533: Fixed a single byte buffer overflow (bsc#1233282).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
216465	Oracle Linux 9 : mingw-glib2 (ELSA-2025-0936)	Nessus	Oracle Linux Local Security Checks	critical
216028	EulerOS 2.0 SP12 : glib2 (EulerOS-SA-2025-1189)	Nessus	Huawei Local Security Checks	critical
216026	EulerOS 2.0 SP11 : glib2 (EulerOS-SA-2025-1156)	Nessus	Huawei Local Security Checks	critical
216022	EulerOS 2.0 SP11 : glib2 (EulerOS-SA-2025-1137)	Nessus	Huawei Local Security Checks	critical
216012	EulerOS 2.0 SP12 : glib2 (EulerOS-SA-2025-1173)	Nessus	Huawei Local Security Checks	critical
215583	Azure Linux 3.0 Security Update: glib (CVE-2024-52533)	Nessus	Azure Linux Local Security Checks	critical
215129	AlmaLinux 9 : mingw-glib2 (ALSA-2025:0936)	Nessus	Alma Linux Local Security Checks	critical
214929	RHEL 9 : mingw-glib2 (RHSA-2025:0936)	Nessus	Red Hat Local Security Checks	critical
213428	Photon OS 5.0: Glib PHSA-2024-5.0-0422	Nessus	PhotonOS Local Security Checks	critical
213422	Photon OS 4.0: Glib PHSA-2024-4.0-0721	Nessus	PhotonOS Local Security Checks	critical
213418	Photon OS 3.0: Glib PHSA-2024-3.0-0807	Nessus	PhotonOS Local Security Checks	critical
213270	SUSE SLES12 Security Update : glib2 (SUSE-SU-2024:4051-2)	Nessus	SuSE Local Security Checks	critical
212575	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : glib2 (SUSE-SU-2024:4078-1)	Nessus	SuSE Local Security Checks	critical
212555	SUSE SLES12 Security Update : glib2 (SUSE-SU-2024:4051-1)	Nessus	SuSE Local Security Checks	critical
212300	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : glib2 (SUSE-SU-2024:4254-1)	Nessus	SuSE Local Security Checks	critical
211943	Fedora 41 : mingw-glib2 (2024-67869f1cb3)	Nessus	Fedora Local Security Checks	critical
211893	Fedora 40 : mingw-glib2 (2024-1e29ad7d25)	Nessus	Fedora Local Security Checks	critical
211776	Debian dla-3962 : libglib2.0-0 - security update	Nessus	Debian Local Security Checks	critical
211522	Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS : GLib vulnerability (USN-7114-1)	Nessus	Ubuntu Local Security Checks	critical
211490	CBL Mariner 2.0 Security Update: glib (CVE-2024-52533)	Nessus	MarinerOS Local Security Checks	critical
211484	SUSE SLES15 Security Update : glib2 (SUSE-SU-2024:3998-1)	Nessus	SuSE Local Security Checks	critical

Detections

Analytics

CVE-2024-52533

critical

Tenable Plugins

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical