Bug 2211828 (CVE-2023-29499)

Summary:	CVE-2023-29499 glib: GVariant offset table entry size is not checked in is_normal()
Product:	[Other] Security Response	Reporter:	Dhananjay Arunesh <darunesh>
Component:	vulnerability	Assignee:	Nobody <nobody>
Status:	NEW ---	QA Contact:
Severity:	low	Docs Contact:
Priority:	low
Version:	unspecified	CC:	mcatanza, mdean, rh-spice-bugs, virt-maint, walters
Target Milestone:	---	Keywords:	Security
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	If docs needed, set a value
Doc Text:	A flaw was found in GLib. GVariant deserialization fails to validate that the input conforms to the expected format, leading to denial of service.	Story Points:	---
Clone Of:		Environment:
Last Closed:		Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:	2212700, 2212703, 2212704, 2212706, 2212699, 2212701, 2212702, 2212705, 2212707
Bug Blocks:	2160453

Description Dhananjay Arunesh 2023-06-02 07:17:04 UTC

GLib's GVariant deserialization prior to GLib 2.74.4 failed to validate the input conforms to the expected format, leading to denial of service.

Referenves:
https://gitlab.gnome.org/GNOME/glib/-/issues/2794

Comment 1 Dhananjay Arunesh 2023-06-06 07:21:33 UTC

Created glib tracking bugs for this issue:

Affects: epel-all [bug 2212699]


Created glib2 tracking bugs for this issue:

Affects: fedora-37 [bug 2212700]
Affects: fedora-38 [bug 2212704]


Created mingw-glib2 tracking bugs for this issue:

Affects: fedora-37 [bug 2212701]
Affects: fedora-38 [bug 2212707]