Log in Start free

Vulnerability · Published May 7, 2024 · Assigned by mitre

CVE-2024-34397

Medium 5.2

In plain English

A medium-severity authentication bypass by spoofing in the glib2 package (AlmaLinux). There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.8% (higher than 56% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)5.2Medium
Exploit odds (30 days)0.8%top 44.5% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

An issue was discovered in GNOME GLib before 2.78.5, and 2.79.x and 2.80.x before 2.80.1. When a GDBus-based client subscribes to signals from a trusted system service such as NetworkManager on a shared computer, other users of the same computer can send spoofed D-Bus signals that the GDBus-based client will wrongly interpret as having been sent by the trusted system service. This could lead to the GDBus-based client behaving incorrectly, with an application-dependent impact.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
AlmaLinux:8glib22.56.4-166.el8_10ALSA-2025:11327
AlmaLinux:9glib22.68.4-14.el9_4.1ALSA-2024:6464
AlmaLinux:8glib2-devel2.56.4-166.el8_10ALSA-2025:11327
AlmaLinux:9glib2-devel2.68.4-14.el9_4.1ALSA-2024:6464
AlmaLinux:8glib2-doc2.56.4-166.el8_10ALSA-2025:11327
AlmaLinux:9glib2-doc2.68.4-14.el9_4.1ALSA-2024:6464
AlmaLinux:8glib2-fam2.56.4-166.el8_10ALSA-2025:11327
AlmaLinux:8glib2-static2.56.4-166.el8_10ALSA-2025:11327
AlmaLinux:9glib2-static2.68.4-14.el9_4.1ALSA-2024:6464
AlmaLinux:8glib2-tests2.56.4-166.el8_10ALSA-2025:11327
AlmaLinux:9glib2-tests2.68.4-14.el9_4.1ALSA-2024:6464
AlmaLinux:9mingw32-glib22.78.6-1.el9ALSA-2024:9442
AlmaLinux:9mingw32-glib2-static2.78.6-1.el9ALSA-2024:9442
AlmaLinux:9mingw64-glib22.78.6-1.el9ALSA-2024:9442
AlmaLinux:9mingw64-glib2-static2.78.6-1.el9ALSA-2024:9442
Alpine:v3.20glib2.80.1-r0ALPINE-CVE-2024-34397
Alpine:v3.21glib2.80.1-r0ALPINE-CVE-2024-34397
Alpine:v3.22glib2.80.1-r0ALPINE-CVE-2024-34397
Alpine:v3.23glib2.80.1-r0ALPINE-CVE-2024-34397
Alpine:v3.24glib2.80.1-r0ALPINE-CVE-2024-34397
Debian:12glib2.02.74.6-2+deb12u1DEBIAN-CVE-2024-34397
Debian:12glib2.02.74.6-2+deb12u1DSA-5682-1
Debian:13glib2.02.80.0-10DEBIAN-CVE-2024-34397
Debian:14glib2.02.80.0-10DEBIAN-CVE-2024-34397
Rocky Linux:8glib20:2.56.4-166.el8_10RLSA-2025:11327
Rocky Linux:9glib20:2.68.4-14.el9_4.1RLSA-2024:6464
Ubuntu:22.04:LTSglib2.02.72.4-0ubuntu2.3USN-6768-1
Ubuntu:22.04:LTSglib2.02.72.4-0ubuntu2.3UBUNTU-CVE-2024-34397
Ubuntu:24.04:LTSglib2.02.80.0-6ubuntu3.1USN-6768-1
Ubuntu:24.04:LTSglib2.02.80.0-6ubuntu3.1UBUNTU-CVE-2024-34397

Affected products (as reported)

VendorProductVersions
n/a n/a n/a

Weakness: CWE-290 · Vector: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L

References