AZL-6438
Dashboard / Vulnerabilities / AZL-6438
Summary: CVE-2021-27219 affecting package glib for versions less than 2.60.1-5
Details: An issue was discovered in GNOME GLib before 2.66.6 and 2.67.x before 2.67.3. The function g_bytes_new has an integer overflow on 64-bit platforms due to an implicit cast from 64 bits to 32 bits. The overflow could potentially lead to memory corruption.
References: https://nvd.nist.gov/vuln/detail/CVE-2021-27219
Affected packages
Package
Name: glib
Purl: pkg:rpm/azure-linux/glib
Affected ranges
Type: ECOSYSTEM
Events:
Introduced- 0
Fixed -2.60.1-5
Affected versions
Common Vulnerability Scoring System
Attack Vector
Network
Adjacent
Local
Physical
Privileges Required
None
Low
High
User Interaction
None
Required
Scope
Unchanged
Changed
Confidentiality
None
Low
High
Integrity
None
Low
High
Availability
None
Low
High
