Buffer Overflow in GNOME GLib's gio/gsocks4aproxy Due to Off-by-One Error
CVE-2024-52533

Currently unrated

Key Information:

Vendor
GNOME GLib
Vendor
CVE Published:
11 November 2024

Summary

gio/gsocks4aproxy.c in GNOME GLib before 2.82.1 has an off-by-one error and resultant buffer overflow because SOCKS4_CONN_MSG_LEN is not sufficient for a trailing '\0' character.

References

https://gitlab.gnome.org/Teams/Releng/security/-/wikis/home
https://gitlab.gnome.org/GNOME/glib/-/issues/3461
https://gitlab.gnome.org/GNOME/glib/-/releases/2.82.1

Timeline

  • Vulnerability published

.