A flaw was found in GLib, which is vulnerable to an integer overflow in the g_string_insert_unichar() function. When the position at which to insert the character is large, the position will overflow, leading to a buffer underwrite.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:11374 advisory.

    GLib provides the core application building blocks for libraries and applications written in C. It     provides the core object system used in GNOME, the main loop implementation, and a large set of utility     functions for strings and common data structures.

    Security Fix(es):

    * glib: buffer overflow in set_connect_msg() (CVE-2024-52533)

    * glib: Buffer Underflow on GLib through glib/gstring.c via function g_string_insert_unichar     (CVE-2025-4373)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:11373 advisory.

    GLib provides the core application building blocks for libraries and applications written in C. It     provides the core object system used in GNOME, the main loop implementation, and a large set of utility     functions for strings and common data structures.

    Security Fix(es):

    * glib: buffer overflow in set_connect_msg() (CVE-2024-52533)

    * glib: Buffer Underflow on GLib through glib/gstring.c via function g_string_insert_unichar     (CVE-2025-4373)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2025:11140 advisory.

    * glib: buffer overflow in set_connect_msg() (CVE-2024-52533)
      * glib: Buffer Underflow on GLib through glib/gstring.c via function g_string_insert_unichar     (CVE-2025-4373)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2025:11327 advisory.

    * glib2: Signal subscription vulnerabilities (CVE-2024-34397)
      * glib: buffer overflow in set_connect_msg() (CVE-2024-52533)
      * glib: Buffer Underflow on GLib through glib/gstring.c via function g_string_insert_unichar     (CVE-2025-4373)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-11327 advisory.

    - Add patches for CVE-2024-34397, CVE-2024-52533, CVE-2025-4373

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:11327 advisory.

    GLib provides the core application building blocks for libraries and applications written in C. It     provides the core object system used in GNOME, the main loop implementation, and a large set of utility     functions for strings and common data structures.

    Security Fix(es):

    * glib2: Signal subscription vulnerabilities (CVE-2024-34397)

    * glib: buffer overflow in set_connect_msg() (CVE-2024-52533)

    * glib: Buffer Underflow on GLib through glib/gstring.c via function g_string_insert_unichar     (CVE-2025-4373)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-10855 advisory.

    - Add patches for CVE-2024-52533 and CVE-2025-4373

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-11140 advisory.

    - Add patches for CVE-2024-52533 and CVE-2025-4373

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:11140 advisory.

    GLib provides the core application building blocks for libraries and applications written in C. It     provides the core object system used in GNOME, the main loop implementation, and a large set of utility     functions for strings and common data structures.

    Security Fix(es):

    * glib: buffer overflow in set_connect_msg() (CVE-2024-52533)

    * glib: Buffer Underflow on GLib through glib/gstring.c via function g_string_insert_unichar     (CVE-2025-4373)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:10855 advisory.

    GLib provides the core application building blocks for libraries and applications written in C. It     provides the core object system used in GNOME, the main loop implementation, and a large set of utility     functions for strings and common data structures.

    Security Fix(es):

    * glib: buffer overflow in set_connect_msg() (CVE-2024-52533)

    * glib: Buffer Underflow on GLib through glib/gstring.c via function g_string_insert_unichar     (CVE-2025-4373)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2025:02233-1 advisory.

    - CVE-2025-4373: integer overflow in the `g_string_insert_unichar()` function can lead to buffer     underwrite and memory       corruption (bsc#1242844).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:02167-1 advisory.

    - CVE-2025-6052: Fixed integer overflow in g_string_maybe_expand() leads to potential buffer overflow in     GString (bsc#1244596).
    - CVE-2025-4373: Fixed buffer underflow through glib/gstring.c via function g_string_insert_unichar     (bsc#1242844).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS / 24.10 / 25.04 host has packages installed that are affected by a vulnerability as referenced in the USN-7532-1 advisory.

    It was discovered that Glib incorrectly handled certain inputs. An attacker could possibly use this issue     to cause a crash or execute arbitrary code.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
242265	RHEL 9 : glib2 (RHSA-2025:11374)	Nessus	Red Hat Local Security Checks	critical
242264	RHEL 9 : glib2 (RHSA-2025:11373)	Nessus	Red Hat Local Security Checks	critical
242254	AlmaLinux 9 : glib2 (ALSA-2025:11140)	Nessus	Alma Linux Local Security Checks	critical
242240	AlmaLinux 8 : glib2 (ALSA-2025:11327)	Nessus	Alma Linux Local Security Checks	critical
242228	Oracle Linux 8 : glib2 (ELSA-2025-11327)	Nessus	Oracle Linux Local Security Checks	critical
242202	RHEL 8 : glib2 (RHSA-2025:11327)	Nessus	Red Hat Local Security Checks	critical
242195	Oracle Linux 10 : glib2 (ELSA-2025-10855)	Nessus	Oracle Linux Local Security Checks	critical
242149	Oracle Linux 9 : glib2 (ELSA-2025-11140)	Nessus	Oracle Linux Local Security Checks	critical
242125	RHEL 9 : glib2 (RHSA-2025:11140)	Nessus	Red Hat Local Security Checks	critical
242067	RHEL 10 : glib2 (RHSA-2025:10855)	Nessus	Red Hat Local Security Checks	critical
241511	SUSE SLES12 Security Update : glib2 (SUSE-SU-2025:02233-1)	Nessus	SuSE Local Security Checks	medium
241039	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : glib2 (SUSE-SU-2025:02167-1)	Nessus	SuSE Local Security Checks	medium
237250	Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS / 24.10 / 25.04 : GLib vulnerability (USN-7532-1)	Nessus	Ubuntu Local Security Checks	medium

Detections

Analytics

CVE-2025-4373

medium

Tenable Plugins

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

medium

medium

medium