CVE-2023-32611

Published: Sep 14, 2023Modified: Oct 15, 2026

5.5

Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Exploitability: 1.8 / Impact: 3.6

Source: NVD

Description

A flaw was found in GLib. GVariant deserialization is vulnerable to a slowdown issue where a crafted GVariant can cause excessive processing, leading to denial of service.

Affected (1)

Products: Gnome: Glib

Gnome

1 product

Glib

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Gnome Glib	version < 2.74.2

Related CWEs

CWE-400

Uncontrolled Resource Consumption

The product does not properly control the allocation and maintenance of a limited resource, thereby enabling an actor to influence the amount of resources consumed, eventually leading to the exhaustion of available resources.

References (13)

https://access.redhat.com/security/cve/CVE-2023-32611

Source: secalert@redhat.com

Third Party Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=2211829

Source: secalert@redhat.com

Issue TrackingThird Party Advisory

https://gitlab.gnome.org/GNOME/glib/-/issues/2797

Source: secalert@redhat.com

Vendor Advisory

https://lists.debian.org/debian-lts-announce/2023/09/msg00030.html

Source: secalert@redhat.com

https://security.gentoo.org/glsa/202311-18

Source: secalert@redhat.com

https://security.netapp.com/advisory/ntap-20231027-0005/

Source: secalert@redhat.com

https://access.redhat.com/security/cve/CVE-2023-32611