In GNOME GLib 2.56.1, g_markup_parse_context_end_parse() in gmarkup.c has a NULL pointer dereference.

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3767-1 advisory.

  - In GNOME GLib 2.56.1, g_markup_parse_context_end_parse() in gmarkup.c has a NULL pointer dereference.
    (CVE-2018-16428)

  - GNOME GLib 2.56.1 has an out-of-bounds read vulnerability in g_markup_parse_context_parse() in gmarkup.c,     related to utf8_str(). (CVE-2018-16429)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of glib2 installed on the remote host is prior to 2.56.1-9. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2023-2049 advisory.

  - In GNOME GLib 2.56.1, g_markup_parse_context_end_parse() in gmarkup.c has a NULL pointer dereference.
    (CVE-2018-16428)

  - GNOME GLib 2.56.1 has an out-of-bounds read vulnerability in g_markup_parse_context_parse() in gmarkup.c,     related to utf8_str(). (CVE-2018-16429)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of glib2 installed on the remote host is prior to 2.36.3-5.23. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2023-1742 advisory.

  - In GNOME GLib 2.56.1, g_markup_parse_context_end_parse() in gmarkup.c has a NULL pointer dereference.
    (CVE-2018-16428)

  - GNOME GLib 2.56.1 has an out-of-bounds read vulnerability in g_markup_parse_context_parse() in gmarkup.c,     related to utf8_str(). (CVE-2018-16429)

  - The keyfile settings backend in GNOME GLib (aka glib2.0) before 2.60.0 creates directories using     g_file_make_directory_with_parents (kfsb->dir, NULL, NULL) and files using g_file_replace_contents     (kfsb->file, contents, length, NULL, FALSE, G_FILE_CREATE_REPLACE_DESTINATION, NULL, NULL, NULL).
    Consequently, it does not properly restrict directory (and file) permissions. Instead, for directories,     0777 permissions are used; for files, default file permissions are used. This is similar to     CVE-2019-12450. (CVE-2019-13012)

  - An issue was discovered in GNOME GLib before 2.66.8. When g_file_replace() is used with     G_FILE_CREATE_REPLACE_DESTINATION to replace a path that is a dangling symlink, it incorrectly also     creates the target of the symlink as an empty file, which could conceivably have security relevance if the     symlink is attacker-controlled. (If the path is a symlink to a file that already exists, then the contents     of that file correctly remain unchanged.) (CVE-2021-28153)

  - A flaw was found in glib before version 2.63.6. Due to random charset alias, pkexec can leak content from     files owned by privileged users to unprivileged ones under the right condition. (CVE-2021-3800)

  - In GNOME GLib 2.56.1, g_markup_parse_context_end_parse() in gmarkup.c has a NULL pointer dereference.
    (CVE-2018-16428) (CVE-2023-24593, CVE-2023-25180)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the glib2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - gio/gsocketclient.c in GNOME GLib 2.59.2 does not     ensure that a parent GTask remains alive during the     execution of a connection-attempting enumeration, which     allows remote attackers to cause a denial of service     (g_socket_client_connected_callback mishandling and     application crash) via a crafted web site, as     demonstrated by GNOME Web (aka     Epiphany).(CVE-2019-9633)

  - GNOME GLib 2.56.1 has an out-of-bounds read     vulnerability in g_markup_parse_context_parse() in     gmarkup.c, related to utf8_str().(CVE-2018-16429)

  - In GNOME GLib 2.56.1,     g_markup_parse_context_end_parse() in gmarkup.c has a     NULL pointer dereference.(CVE-2018-16428)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the glib2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - In GNOME GLib 2.56.1,     g_markup_parse_context_end_parse() in gmarkup.c has a     NULL pointer dereference.(CVE-2018-16428)

  - GNOME GLib 2.56.1 has an out-of-bounds read     vulnerability in g_markup_parse_context_parse() in     gmarkup.c, related to utf8_str().(CVE-2018-16429)

  - gio/gsocketclient.c in GNOME GLib 2.59.2 does not     ensure that a parent GTask remains alive during the     execution of a connection-attempting enumeration, which     allows remote attackers to cause a denial of service     (g_socket_client_connected_callback mishandling and     application crash) via a crafted web site, as     demonstrated by GNOME Web (aka     Epiphany).(CVE-2019-9633)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for glib2 provides the following fix :

Security issues fixed :

CVE-2019-12450: Fixed an improper file permission when copy operation takes place (bsc#1137001).

CVE-2018-16428: Avoid a NULL pointer dereference that could crash glib2 users in markup processing (bnc#1107121).

CVE-2018-16429: Fixed out-of-bounds read vulnerability ing_markup_parse_context_parse() (bsc#1107116).

Non-security issues fixed: Install dummy *-mimeapps.list files to prevent dead symlinks. (bsc#1061599)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for glib2 fixes the following issues :

Security issues fixed :

CVE-2019-12450: Fixed an improper file permission when copy operation takes place (bsc#1137001).

CVE-2018-16428: Avoid a NULL pointer dereference (bsc#1107121).

CVE-2018-16429: Fixed out-of-bounds read vulnerability ing_markup_parse_context_parse() (bsc#1107116).

Some exploitable parser bugs in GVariant and GDBus subsystems were fixed (bsc#1111499).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for glib2 fixes the following issues :

Security issues fixed :

  - CVE-2018-16428: Do not do a NULL pointer dereference     (crash). Avoid that, at the cost of introducing a new     translatable error message (bsc#1107121).

  - CVE-2018-16429: Fixed out-of-bounds read vulnerability     ing_markup_parse_context_parse() (bsc#1107116).

Non-security issue fixed :

  - various GVariant parsing issues have been resolved     (bsc#1111499)

This update was imported from the SUSE:SLE-15:Update update project.

An update of the glib package has been released.

Security fixes for CVE-2018-6055 CVE-2018-6119 CVE-2018-16429 CVE-2018-16428

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Security fixes for CVE-2018-6055 CVE-2018-6119 CVE-2018-16429 CVE-2018-16428

----

Update to Chromium 69. (EPEL-7 update is blocked by a GCC bug:
1629813, so as soon as devtoolset-8 arrives...)

Fixes a lot of security issues, like every major release of Chromium, including CVE-2018-16087 CVE-2018-16088 CVE-2018-16086CVE-2018-16065 CVE-2018-16066 CVE-2018-16067 CVE-2018-16068 CVE-2018-16069 CVE-2018-16070 CVE-2018-16071 CVE-2018-16072 CVE-2018-16073 CVE-2018-16074 CVE-2018-16075 CVE-2018-16076 CVE-2018-16077 CVE-2018-16078

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for glib2 fixes the following issues :

Security issues fixed :

CVE-2018-16428: Do not do a NULL pointer dereference (crash). Avoid that, at the cost of introducing a new translatable error message (bsc#1107121).

CVE-2018-16429: Fixed out-of-bounds read vulnerability ing_markup_parse_context_parse() (bsc#1107116).

Non-security issue fixed: various GVariant parsing issues have been resolved (bsc#1111499)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
183598	Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS : GLib vulnerabilities (USN-3767-1)	Nessus	Ubuntu Local Security Checks	critical
175955	Amazon Linux 2 : glib2 (ALAS-2023-2049)	Nessus	Amazon Linux Local Security Checks	critical
175096	Amazon Linux AMI : glib2 (ALAS-2023-1742)	Nessus	Amazon Linux Local Security Checks	critical
132123	EulerOS 2.0 SP3 : glib2 (EulerOS-SA-2019-2588)	Nessus	Huawei Local Security Checks	critical
131901	EulerOS 2.0 SP2 : glib2 (EulerOS-SA-2019-2409)	Nessus	Huawei Local Security Checks	critical
126461	SUSE SLED12 / SLES12 Security Update : glib2 (SUSE-SU-2019:1722-1)	Nessus	SuSE Local Security Checks	critical
126152	SUSE SLES12 Security Update : glib2 (SUSE-SU-2019:1596-1)	Nessus	SuSE Local Security Checks	critical
123388	openSUSE Security Update : glib2 (openSUSE-2019-959)	Nessus	SuSE Local Security Checks	critical
122004	Photon OS 2.0: Glib PHSA-2018-2.0-0108	Nessus	PhotonOS Local Security Checks	critical
121896	Photon OS 1.0: Glib PHSA-2018-1.0-0194	Nessus	PhotonOS Local Security Checks	critical
120923	Fedora 28 : chromium (2018-f76e6d17f1)	Nessus	Fedora Local Security Checks	critical
120356	Fedora 29 : chromium (2018-39be36e9fc)	Nessus	Fedora Local Security Checks	critical
120169	SUSE SLED15 / SLES15 Security Update : glib2 (SUSE-SU-2018:3913-1)	Nessus	SuSE Local Security Checks	critical
119493	openSUSE Security Update : glib2 (openSUSE-2018-1485)	Nessus	SuSE Local Security Checks	critical

Detections

Analytics

CVE-2018-16428

critical

Tenable Plugins

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical