Log in Start free

Vulnerability · Published Feb 15, 2021 · Assigned by mitre

CVE-2021-27219

High 7.5

In plain English

A high-severity security flaw in the glib2-doc package (AlmaLinux). There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 3.1% (higher than 88% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS NVD)7.5High
Exploit odds (30 days)3.1%top 12.3% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known

Official description

An issue was discovered in GNOME GLib before 2.66.6 and 2.67.x before 2.67.3. The function g_bytes_new has an integer overflow on 64-bit platforms due to an implicit cast from 64 bits to 32 bits. The overflow could potentially lead to memory corruption.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
AlmaLinux:8glib2-doc2.56.4-10.el8_4ALSA-2021:2170
AlmaLinux:8glib2-static2.56.4-10.el8_4ALSA-2021:2170
AlmaLinux:8mingw32-glib22.66.7-2.el8ALSA-2021:4526
AlmaLinux:8mingw32-glib2-static2.66.7-2.el8ALSA-2021:4526
AlmaLinux:8mingw64-glib22.66.7-2.el8ALSA-2021:4526
AlmaLinux:8mingw64-glib2-static2.66.7-2.el8ALSA-2021:4526
Alpine:v3.20glib2.66.6-r0ALPINE-CVE-2021-27219
Alpine:v3.21glib2.66.6-r0ALPINE-CVE-2021-27219
Alpine:v3.22glib2.66.6-r0ALPINE-CVE-2021-27219
Alpine:v3.23glib2.66.6-r0ALPINE-CVE-2021-27219
Alpine:v3.24glib2.66.6-r0ALPINE-CVE-2021-27219
Debian:12glib2.02.66.6-1DEBIAN-CVE-2021-27219
Debian:13glib2.02.66.6-1DEBIAN-CVE-2021-27219
Debian:14glib2.02.66.6-1DEBIAN-CVE-2021-27219
Rocky Linux:8glib20:2.56.4-10.el8_4RLSA-2021:2170

Affected products (as reported)

VendorProductVersions
n/a n/a n/a

References