Detections
Analytics

Echo: glib2.0: security update to 2.84.4-3~deb13u2+e3

low Tenable Self-Hosted Container Security Plugin ID 459666

Description

There are packages installed that are affected by a vulnerability referenced in the following CVE:

 - A flaw was found in Glib's content type parsing logic. This buffer underflow vulnerability occurs because
 the length of a header line is stored in a signed integer, which can lead to integer wraparound for very
 large inputs. This results in pointer underflow and out-of-bounds memory access. Exploitation requires a
 local user to install or process a specially crafted treemagic file, which can lead to local denial of
 service or application instability. (CVE-2026-1485)

Solution

Update the glib2.0 library and its related packages to version 2.84.4-3~deb13u2+e3 or later.

See Also

https://advisory.echohq.com/cve/CVE-2026-1485

Plugin Details

Severity: Low

ID: 459666

Version: Revision 1.1

Type: Local

Published: 10/2/2026

Updated: 10/2/2026

Risk Information

VPR

Risk Factor: Low

Score: 1.2

Percentile: 0.01

CVSS v2

Risk Factor: Low

Base Score: 2.1

Temporal Score: 1.6

Vector: CVSS2#AV:L/AC:L/Au:N/C:N/I:N/A:P

CVSS Score Source: CVE-2026-1485

CVSS v3

Risk Factor: Low

Base Score: 2.8

Temporal Score: 2.5

Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

Exploit Ease: No known exploits are available

Patch Publication Date: 1/28/2026

Vulnerability Publication Date: 1/27/2026

Reference Information

CVE: CVE-2026-1485