CVE-2024-52533

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-52533
gio/gsocks4aproxy.c in GNOME GLib before 2.82.1 has an off-by-one error and resultant buffer overflow because SOCKS4_CONN_MSG_LEN is not sufficient for a trailing '\0' character.
CVSS

No CVSS.

References
Link Resource
http://www.openwall.com/lists/oss-security/2024/11/12/11 Mailing List
https://gitlab.gnome.org/GNOME/glib/-/issues/3461 Exploit Issue Tracking
https://gitlab.gnome.org/GNOME/glib/-/releases/2.82.1 Release Notes
https://gitlab.gnome.org/Teams/Releng/security/-/wikis/home Vendor Advisory
https://lists.debian.org/debian-lts-announce/2024/11/msg00020.html Mailing List Third Party Advisory
https://security.netapp.com/advisory/ntap-20241206-0009/ Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:gnome:glib:*:*:*:*:*:*:*:*

Configuration 2 (hide)

cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*

Configuration 3 (hide)

OR cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*
cpe:2.3:a:netapp:ontap_tools:10:*:*:*:*:vmware_vsphere:*:*
History

17 Jun 2025, 01:23

Type Values Removed Values Added
First Time Gnome glib
Netapp
Gnome
Netapp active Iq Unified Manager
Debian debian Linux
Netapp ontap Tools
Debian
References () https://gitlab.gnome.org/Teams/Releng/security/-/wikis/home - () https://gitlab.gnome.org/Teams/Releng/security/-/wikis/home - Vendor Advisory
References () https://gitlab.gnome.org/GNOME/glib/-/issues/3461 - () https://gitlab.gnome.org/GNOME/glib/-/issues/3461 - Exploit, Issue Tracking
References () https://security.netapp.com/advisory/ntap-20241206-0009/ - () https://security.netapp.com/advisory/ntap-20241206-0009/ - Third Party Advisory
References () http://www.openwall.com/lists/oss-security/2024/11/12/11 - () http://www.openwall.com/lists/oss-security/2024/11/12/11 - Mailing List
References () https://lists.debian.org/debian-lts-announce/2024/11/msg00020.html - () https://lists.debian.org/debian-lts-announce/2024/11/msg00020.html - Mailing List, Third Party Advisory
References () https://gitlab.gnome.org/GNOME/glib/-/releases/2.82.1 - () https://gitlab.gnome.org/GNOME/glib/-/releases/2.82.1 - Release Notes
CPE cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*
cpe:2.3:a:gnome:glib:*:*:*:*:*:*:*:*
cpe:2.3:a:netapp:ontap_tools:10:*:*:*:*:vmware_vsphere:*:*
cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*

06 Dec 2024, 14:15

Type Values Removed Values Added
References
  • () https://security.netapp.com/advisory/ntap-20241206-0009/ -

23 Nov 2024, 21:15

Type Values Removed Values Added
References
  • () https://lists.debian.org/debian-lts-announce/2024/11/msg00020.html -
  • () http://www.openwall.com/lists/oss-security/2024/11/12/11 -

11 Nov 2024, 23:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-11-11 23:15

Updated : 2025-06-17 01:23

NVD link : CVE-2024-52533

Mitre link : CVE-2024-52533

JSON object : View

Products Affected

debian

  • debian_linux

netapp

  • active_iq_unified_manager
  • ontap_tools

gnome

  • glib
CWE

No CWE.