Gvariant offset table entry size is not checked in is_normal()
Priority LOW 34CWE-400Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Denial of service
- Confidentiality · integrity · availability
- None · None · High
- Fix status
- Partial Red Hat: 4 fixed, 3 without a fix
Attack profile from CVSS 3.1 · NVD. Fix status from CNA and Red Hat. Impact type from CWE-400.
Summary
A flaw was found in GLib. GVariant deserialization fails to validate that the input conforms to the expected format, leading to denial of service.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00785 56th percentileScored 2026-11-07
Fix Partial Red Hat: 2 advisoriesRed Hat: 4 fixed, 3 without a fix
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | glib2 | — | — | No fix listed | CNA |
| Red Hat | Red Hat Enterprise Linux 6 | — | — | No fix listed | CNA |
| Red Hat | Red Hat Enterprise Linux 7 | — | — | No fix listed | CNA |
| Red Hat | Red Hat Enterprise Linux 8 | — | — | No fix listed | CNA |
| Red Hat | Red Hat Enterprise Linux 9 | — | — | No fix listed | CNA |
| Fedora | Extra Packages for Enterprise Linux | — | — | No fix listed | CNA |
| Fedora | Fedora 37 | — | — | No fix listed | CNA |
| Fedora | Fedora 38 | — | — | No fix listed | CNA |
| Fedora | Fedora 38 | — | — | No fix listed | CNA |
| Fedora | Fedora 37 | — | — | No fix listed | CNA |
- glib2 Vendor— Affected — Fixed in — No fix listed CNA
- Red Hat Enterprise Linux 6 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat Enterprise Linux 7 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat Enterprise Linux 8 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat Enterprise Linux 9 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Extra Packages for Enterprise Linux VendorFedora Affected — Fixed in — No fix listed CNA
- Fedora 37 VendorFedora Affected — Fixed in — No fix listed CNA
- Fedora 38 VendorFedora Affected — Fixed in — No fix listed CNA
- Fedora 38 VendorFedora Affected — Fixed in — No fix listed CNA
- Fedora 37 VendorFedora Affected — Fixed in — No fix listed CNA
Remediation
Red Hat 2 advisories
- RHSA-2024:2528 Released 2024-04-30 · Red Hat rating Lowmingw-glib2 security update
- Red Hat Enterprise Linux CRB (v. 9) mingw-glib2-2.78.0-1.el9, mingw32-glib2-2.78.0-1.el9, mingw32-glib2-static-2.78.0-1.el9 +2
- RHSA-2023:6631 Released 2023-11-07 · Red Hat rating Lowglib2 security and bug fix update
- Red Hat CodeReady Linux Builder (v. 9) glib2-static-2.68.4-11.el9
- Red Hat Enterprise Linux AppStream (v. 9) glib2-devel-2.68.4-11.el9, glib2-doc-2.68.4-11.el9, glib2-tests-2.68.4-11.el9
- Red Hat Enterprise Linux BaseOS (v. 9) glib2-2.68.4-11.el9
Vendor assessments
Red Hat
Red Hat rating: Low. Red Hat's page for this CVE →
| Product | Status | Plan or fix |
|---|---|---|
| Red Hat Enterprise Linux 6 | Affected | No fix planned: Out of support scope |
| Red Hat Enterprise Linux 7 | Affected | No fix planned: Out of support scope |
| Red Hat Enterprise Linux 8 | Affected | No fix yet |
| Red Hat CodeReady Linux Builder (v. 9) | Fixed | RHSA-2023:6631 |
| Red Hat Enterprise Linux AppStream (v. 9) | Fixed | RHSA-2023:6631 |
| Red Hat Enterprise Linux BaseOS (v. 9) | Fixed | RHSA-2023:6631 |
| Red Hat Enterprise Linux CRB (v. 9) | Fixed | RHSA-2024:2528 |
Timeline
- 2026-10-02 Threatist record created from CVE-2023-29499
- 2026-10-03 Alias added: GHSA-794g-pjcw-ggfp
References
More Red Hat vulnerabilities
- TI-2019-15875 Protection mechanism failure in Jenkins Pipeline: Groovy Plugin KEVCVSS 3.1CRITICAL 9.9
- TI-2019-15874 Protection mechanism failure in Jenkins Script Security Plugin KEVCVSS 3.1CRITICAL 9.9
- TI-2019-08259 Underflow in PHP-FPM can lead to RCE KEVCVSS 3.1CRITICAL 9.8
- TI-2019-05363 Code injection in Elastic Kibana KEVCVSS 3.1CRITICAL 10.0
- TI-2019-03949 Out-of-bounds write in ESXi and Horizon DaaS KEVCVSS 3.1CRITICAL 9.8
- TI-2018-16080 A code execution vulnerability exists in the Stapler web framework used by Jenkins 2.153… KEVCVSS 3.1CRITICAL 9.8
Sources
- CVE-2023-29499 · CVE Program
- CVE-2023-29499 · NVD
- FIRST EPSS
- GHSA-794g-pjcw-ggfp · GitHub Advisory Database · CC BY 4.0
- CVE-2023-29499 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences