CVE catalog

CVE-2018-16428

glib2.0: CVE-2018-16428

[CVE catalog]

Severity
Medium · CVSS 4CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Published
Source
[NVD] · [CVE record]
EPSS
4.69% · Oct 25, 2026

In GNOME GLib 2.56.1, g_markup_parse_context_end_parse() in gmarkup.c has a NULL pointer dereference.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianglib2.0sid2.90.1-2fixed
Debianglib2.0forky2.90.1-2fixed
Debianglib2.0trixie2.84.4-3~deb13u5fixed
Debianglib2.0bookworm2.74.6-2+deb12u9fixed
Debianglib2.0bookworm-security2.74.6-2+deb12u2fixed
Ubuntuglib2.014.042.38.0-1ubuntu1vulnerable
Ubuntuglib2.014.042.38.1-1vulnerable
Ubuntuglib2.014.042.39.1-0ubuntu1vulnerable
Ubuntuglib2.014.042.39.1-0ubuntu2vulnerable
Ubuntuglib2.014.042.39.1-0ubuntu3vulnerable
Ubuntuglib2.014.042.39.2-0ubuntu1vulnerable
Ubuntuglib2.014.042.39.2-0ubuntu2vulnerable
Ubuntuglib2.014.042.39.3-0ubuntu4vulnerable
Ubuntuglib2.014.042.39.4-0ubuntu1vulnerable
Ubuntuglib2.014.042.39.90-0ubuntu1vulnerable
Ubuntuglib2.014.042.39.91-0ubuntu2vulnerable
Ubuntuglib2.014.042.39.91-0ubuntu3vulnerable
Ubuntuglib2.014.042.39.92-2vulnerable
Ubuntuglib2.014.042.40.0-1vulnerable
Ubuntuglib2.014.042.40.0-1ubuntu1vulnerable
Ubuntuglib2.014.042.40.0-2vulnerable
Ubuntuglib2.014.042.40.2-0ubuntu1vulnerable
Ubuntuglib2.014.042.40.2-0ubuntu1.1fixed
Ubuntuglib2.016.042.46.1-1vulnerable
Ubuntuglib2.016.042.46.1-2vulnerable
Ubuntuglib2.016.042.47.1-1vulnerable
Ubuntuglib2.016.042.47.3-3vulnerable
Ubuntuglib2.016.042.47.4-1vulnerable
Ubuntuglib2.016.042.47.5-1vulnerable
Ubuntuglib2.016.042.47.6-1vulnerable
Ubuntuglib2.016.042.48.0-1ubuntu3vulnerable
Ubuntuglib2.016.042.48.0-1ubuntu4vulnerable
Ubuntuglib2.016.042.48.1-1~ubuntu16.04.1vulnerable
Ubuntuglib2.016.042.48.2-0ubuntu1vulnerable
Ubuntuglib2.016.042.48.2-0ubuntu3vulnerable
Ubuntuglib2.016.042.48.2-0ubuntu4vulnerable
Ubuntuglib2.016.042.48.2-0ubuntu4.1fixed
Ubuntuglib2.018.042.54.1-1ubuntu1vulnerable
Ubuntuglib2.018.042.55.2-2ubuntu1vulnerable
Ubuntuglib2.018.042.56.0-2ubuntu1vulnerable
Ubuntuglib2.018.042.56.0-4ubuntu1vulnerable
Ubuntuglib2.018.042.56.1-2ubuntu1vulnerable
Ubuntuglib2.018.042.56.2-0ubuntu0.18.04.1vulnerable
Ubuntuglib2.018.042.56.2-0ubuntu0.18.04.2fixed
Ubuntuglib2.014.042.38.0-1ubuntu1vulnerable
Ubuntuglib2.014.042.38.1-1vulnerable
Ubuntuglib2.014.042.39.1-0ubuntu1vulnerable
Ubuntuglib2.014.042.39.1-0ubuntu2vulnerable
Ubuntuglib2.014.042.39.1-0ubuntu3vulnerable
Ubuntuglib2.014.042.39.2-0ubuntu1vulnerable
Ubuntuglib2.014.042.39.2-0ubuntu2vulnerable
Ubuntuglib2.014.042.39.3-0ubuntu4vulnerable
Ubuntuglib2.014.042.39.4-0ubuntu1vulnerable
Ubuntuglib2.014.042.39.90-0ubuntu1vulnerable
Ubuntuglib2.014.042.39.91-0ubuntu2vulnerable
Ubuntuglib2.014.042.39.91-0ubuntu3vulnerable
Ubuntuglib2.014.042.39.92-2vulnerable
Ubuntuglib2.014.042.40.0-1vulnerable
Ubuntuglib2.014.042.40.0-1ubuntu1vulnerable
Ubuntuglib2.014.042.40.0-2vulnerable
Ubuntuglib2.014.042.40.2-0ubuntu1vulnerable
Ubuntuglib2.014.042.40.2-0ubuntu1.1fixed
Ubuntuglib2.016.042.46.1-1vulnerable
Ubuntuglib2.016.042.46.1-2vulnerable
Ubuntuglib2.016.042.47.1-1vulnerable
Ubuntuglib2.016.042.47.3-3vulnerable
Ubuntuglib2.016.042.47.4-1vulnerable
Ubuntuglib2.016.042.47.5-1vulnerable
Ubuntuglib2.016.042.47.6-1vulnerable
Ubuntuglib2.016.042.48.0-1ubuntu3vulnerable
Ubuntuglib2.016.042.48.0-1ubuntu4vulnerable
Ubuntuglib2.016.042.48.1-1~ubuntu16.04.1vulnerable
Ubuntuglib2.016.042.48.2-0ubuntu1vulnerable
Ubuntuglib2.016.042.48.2-0ubuntu3vulnerable
Ubuntuglib2.016.042.48.2-0ubuntu4vulnerable
Ubuntuglib2.016.042.48.2-0ubuntu4.1fixed
Ubuntuglib2.018.042.54.1-1ubuntu1vulnerable
Ubuntuglib2.018.042.55.2-2ubuntu1vulnerable
Ubuntuglib2.018.042.56.0-2ubuntu1vulnerable
Ubuntuglib2.018.042.56.0-4ubuntu1vulnerable
Ubuntuglib2.018.042.56.1-2ubuntu1vulnerable
Ubuntuglib2.018.042.56.2-0ubuntu0.18.04.1vulnerable
Ubuntuglib2.018.042.56.2-0ubuntu0.18.04.2fixed
Suseglib2linux enterprise server 12-ltss2.38.2-7.9.2fixed
Suseglib2linux enterprise server 12 sp1-ltss2.38.2-7.9.2fixed
Suseglib2linux enterprise module for basesystem 152.54.3-4.7.1fixed
Suseglib2linux enterprise module for package hub 152.54.3-4.7.1fixed
Suseglib2openstack cloud 72.48.2-12.12.2fixed
Suseglib2linux enterprise desktop 12 sp32.48.2-12.12.2fixed
Suseglib2linux enterprise desktop 12 sp42.48.2-12.12.2fixed
Suseglib2linux enterprise server for sap applications 12 sp22.48.2-12.12.2fixed
Suseglib2linux enterprise software development kit 12 sp32.48.2-12.12.2fixed
Suseglib2linux enterprise software development kit 12 sp42.48.2-12.12.2fixed
Suseglib2linux enterprise server 12 sp2-ltss2.48.2-12.12.2fixed
Suseglib2linux enterprise server 12 sp2-bcl2.48.2-12.12.2fixed
Suseglib2linux enterprise server 12 sp32.48.2-12.12.2fixed
Suseglib2linux enterprise server for sap applications 12 sp32.48.2-12.12.2fixed
Suseglib2linux enterprise server 12 sp42.48.2-12.12.2fixed
Suseglib2linux enterprise server for sap applications 12 sp42.48.2-12.12.2fixed
Suseglib2linux enterprise workstation extension 12 sp32.48.2-12.12.2fixed
Suseglib2linux enterprise workstation extension 12 sp42.48.2-12.12.2fixed
Suseglib2enterprise storage 42.48.2-12.12.2fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianglib2.0sourcesid2.58.0-1lowNot reportedNot reported
Debianglib2.0sourceforky2.58.0-1lowNot reportedNot reported
Debianglib2.0sourcetrixie2.58.0-1lowNot reportedNot reported
Debianglib2.0sourcebookworm2.58.0-1lowNot reportedNot reported
Ubuntuglib2.0deb14.042.40.2-0ubuntu1.1Not reportedUBUNTU-CVE-2018-16428Not reported
Ubuntuglib2.0deb16.042.48.2-0ubuntu4.1Not reportedUBUNTU-CVE-2018-16428Not reported
Ubuntuglib2.0deb18.042.56.2-0ubuntu0.18.04.2Not reportedUBUNTU-CVE-2018-16428Not reported
Ubuntuglib2.0deb14.042.40.2-0ubuntu1.1Not reportedUSN-3767-1Not reported
Ubuntuglib2.0deb16.042.48.2-0ubuntu4.1Not reportedUSN-3767-1Not reported
Ubuntuglib2.0deb18.042.56.2-0ubuntu0.18.04.2Not reportedUSN-3767-1Not reported
Suseglib2rpmlinux enterprise server 12-ltss2.38.2-7.9.2Not reportedSUSE-SU-2019:1596-1Not reported
Suseglib2rpmlinux enterprise server 12 sp1-ltss2.38.2-7.9.2Not reportedSUSE-SU-2019:1596-1Not reported
Suseglib2rpmlinux enterprise module for basesystem 152.54.3-4.7.1Not reportedSUSE-SU-2018:3913-1Not reported
Suseglib2rpmlinux enterprise module for package hub 152.54.3-4.7.1Not reportedSUSE-SU-2018:3913-1Not reported
Suseglib2rpmopenstack cloud 72.48.2-12.12.2Not reportedSUSE-SU-2019:1722-1Not reported
Suseglib2rpmlinux enterprise desktop 12 sp32.48.2-12.12.2Not reportedSUSE-SU-2019:1722-1Not reported
Suseglib2rpmlinux enterprise desktop 12 sp42.48.2-12.12.2Not reportedSUSE-SU-2019:1722-1Not reported
Suseglib2rpmlinux enterprise server for sap applications 12 sp22.48.2-12.12.2Not reportedSUSE-SU-2019:1722-1Not reported
Suseglib2rpmlinux enterprise software development kit 12 sp32.48.2-12.12.2Not reportedSUSE-SU-2019:1722-1Not reported
Suseglib2rpmlinux enterprise software development kit 12 sp42.48.2-12.12.2Not reportedSUSE-SU-2019:1722-1Not reported
Suseglib2rpmlinux enterprise server 12 sp2-ltss2.48.2-12.12.2Not reportedSUSE-SU-2019:1722-1Not reported
Suseglib2rpmlinux enterprise server 12 sp2-bcl2.48.2-12.12.2Not reportedSUSE-SU-2019:1722-1Not reported
Suseglib2rpmlinux enterprise server 12 sp32.48.2-12.12.2Not reportedSUSE-SU-2019:1722-1Not reported
Suseglib2rpmlinux enterprise server for sap applications 12 sp32.48.2-12.12.2Not reportedSUSE-SU-2019:1722-1Not reported
Suseglib2rpmlinux enterprise server 12 sp42.48.2-12.12.2Not reportedSUSE-SU-2019:1722-1Not reported
Suseglib2rpmlinux enterprise server for sap applications 12 sp42.48.2-12.12.2Not reportedSUSE-SU-2019:1722-1Not reported
Suseglib2rpmlinux enterprise workstation extension 12 sp32.48.2-12.12.2Not reportedSUSE-SU-2019:1722-1Not reported
Suseglib2rpmlinux enterprise workstation extension 12 sp42.48.2-12.12.2Not reportedSUSE-SU-2019:1722-1Not reported
Suseglib2rpmenterprise storage 42.48.2-12.12.2Not reportedSUSE-SU-2019:1722-1Not reported

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • Source package: [glib2.0]

    Details (4)
    • 2.74.6-2+deb12u9 · amd64 · bookworm

      Fixed · Fixed: 2.58.0-1

      dsa · glib2.0 · debian · bookworm; dsa · glib2.0 · debian · 12

    • 2.74.6-2+deb12u9 · arm64 · bookworm

      Fixed · Fixed: 2.58.0-1

      dsa · glib2.0 · debian · bookworm; dsa · glib2.0 · debian · 12

    • 2.74.6-2+deb12u2 · amd64 · bookworm-security

      Fixed · Fixed: 2.58.0-1

      dsa · glib2.0 · debian · bookworm; dsa · glib2.0 · debian · 12

    • 2.74.6-2+deb12u2 · arm64 · bookworm-security

      Fixed · Fixed: 2.58.0-1

      dsa · glib2.0 · debian · bookworm; dsa · glib2.0 · debian · 12

  • Source package: [glib2.0]

    Details (4)
    • 2.74.6-2+deb12u9 · amd64 · bookworm

      Fixed · Fixed: 2.58.0-1

      dsa · glib2.0 · debian · bookworm; dsa · glib2.0 · debian · 12

    • 2.74.6-2+deb12u9 · arm64 · bookworm

      Fixed · Fixed: 2.58.0-1

      dsa · glib2.0 · debian · bookworm; dsa · glib2.0 · debian · 12

    • 2.74.6-2+deb12u2 · amd64 · bookworm-security

      Fixed · Fixed: 2.58.0-1

      dsa · glib2.0 · debian · bookworm; dsa · glib2.0 · debian · 12

    • 2.74.6-2+deb12u2 · arm64 · bookworm-security

      Fixed · Fixed: 2.58.0-1

      dsa · glib2.0 · debian · bookworm; dsa · glib2.0 · debian · 12

  • Source package: [glib2.0]

    Details (4)
    • 2.74.6-2+deb12u9 · all · bookworm

      Fixed · Fixed: 2.58.0-1

      dsa · glib2.0 · debian · bookworm; dsa · glib2.0 · debian · 12

    • 2.74.6-2+deb12u9 · all · bookworm

      Fixed · Fixed: 2.58.0-1

      dsa · glib2.0 · debian · bookworm; dsa · glib2.0 · debian · 12

    • 2.74.6-2+deb12u2 · all · bookworm-security

      Fixed · Fixed: 2.58.0-1

      dsa · glib2.0 · debian · bookworm; dsa · glib2.0 · debian · 12

    • 2.74.6-2+deb12u2 · all · bookworm-security

      Fixed · Fixed: 2.58.0-1

      dsa · glib2.0 · debian · bookworm; dsa · glib2.0 · debian · 12

  • Source package: [glib2.0]

    Details (4)
    • 2.74.6-2+deb12u9 · amd64 · bookworm

      Fixed · Fixed: 2.58.0-1

      dsa · glib2.0 · debian · bookworm; dsa · glib2.0 · debian · 12

    • 2.74.6-2+deb12u9 · arm64 · bookworm

      Fixed · Fixed: 2.58.0-1

      dsa · glib2.0 · debian · bookworm; dsa · glib2.0 · debian · 12

    • 2.74.6-2+deb12u2 · amd64 · bookworm-security

      Fixed · Fixed: 2.58.0-1

      dsa · glib2.0 · debian · bookworm; dsa · glib2.0 · debian · 12

    • 2.74.6-2+deb12u2 · arm64 · bookworm-security

      Fixed · Fixed: 2.58.0-1

      dsa · glib2.0 · debian · bookworm; dsa · glib2.0 · debian · 12

  • Source package: [glib2.0]

    Details (4)
    • 2.74.6-2+deb12u9 · amd64 · bookworm

      Fixed · Fixed: 2.58.0-1

      dsa · glib2.0 · debian · bookworm; dsa · glib2.0 · debian · 12

    • 2.74.6-2+deb12u9 · arm64 · bookworm

      Fixed · Fixed: 2.58.0-1

      dsa · glib2.0 · debian · bookworm; dsa · glib2.0 · debian · 12

    • 2.74.6-2+deb12u2 · amd64 · bookworm-security

      Fixed · Fixed: 2.58.0-1

      dsa · glib2.0 · debian · bookworm; dsa · glib2.0 · debian · 12

    • 2.74.6-2+deb12u2 · arm64 · bookworm-security

      Fixed · Fixed: 2.58.0-1

      dsa · glib2.0 · debian · bookworm; dsa · glib2.0 · debian · 12

  • Source package: [glib2.0]

    Details (4)
    • 2.74.6-2+deb12u9 · all · bookworm

      Fixed · Fixed: 2.58.0-1

      dsa · glib2.0 · debian · bookworm; dsa · glib2.0 · debian · 12

    • 2.74.6-2+deb12u9 · all · bookworm

      Fixed · Fixed: 2.58.0-1

      dsa · glib2.0 · debian · bookworm; dsa · glib2.0 · debian · 12

    • 2.74.6-2+deb12u2 · all · bookworm-security

      Fixed · Fixed: 2.58.0-1

      dsa · glib2.0 · debian · bookworm; dsa · glib2.0 · debian · 12

    • 2.74.6-2+deb12u2 · all · bookworm-security

      Fixed · Fixed: 2.58.0-1

      dsa · glib2.0 · debian · bookworm; dsa · glib2.0 · debian · 12

  • Source package: [glib2.0]

    Details (4)
    • 2.74.6-2+deb12u9 · amd64 · bookworm

      Fixed · Fixed: 2.58.0-1

      dsa · glib2.0 · debian · bookworm; dsa · glib2.0 · debian · 12

    • 2.74.6-2+deb12u9 · arm64 · bookworm

      Fixed · Fixed: 2.58.0-1

      dsa · glib2.0 · debian · bookworm; dsa · glib2.0 · debian · 12

    • 2.74.6-2+deb12u2 · amd64 · bookworm-security

      Fixed · Fixed: 2.58.0-1

      dsa · glib2.0 · debian · bookworm; dsa · glib2.0 · debian · 12

    • 2.74.6-2+deb12u2 · arm64 · bookworm-security

      Fixed · Fixed: 2.58.0-1

      dsa · glib2.0 · debian · bookworm; dsa · glib2.0 · debian · 12

[Debian 13 (Trixie)]

  • Source package: [glib2.0]

    Details (2)
    • 2.84.4-3~deb13u3 · amd64 · trixie

      Fixed · Fixed: 2.58.0-1

      dsa · glib2.0 · debian · 13

    • 2.84.4-3~deb13u3 · arm64 · trixie

      Fixed · Fixed: 2.58.0-1

      dsa · glib2.0 · debian · 13

  • Source package: [glib2.0]

    Details (2)
    • 2.84.4-3~deb13u3 · amd64 · trixie

      Fixed · Fixed: 2.58.0-1

      dsa · glib2.0 · debian · 13

    • 2.84.4-3~deb13u3 · arm64 · trixie

      Fixed · Fixed: 2.58.0-1

      dsa · glib2.0 · debian · 13

  • Source package: [glib2.0]

    Details (2)
    • 2.84.4-3~deb13u3 · amd64 · trixie

      Fixed · Fixed: 2.58.0-1

      dsa · glib2.0 · debian · 13

    • 2.84.4-3~deb13u3 · arm64 · trixie

      Fixed · Fixed: 2.58.0-1

      dsa · glib2.0 · debian · 13

  • Source package: [glib2.0]

    Details (2)
    • 2.84.4-3~deb13u3 · amd64 · trixie

      Fixed · Fixed: 2.58.0-1

      dsa · glib2.0 · debian · 13

    • 2.84.4-3~deb13u3 · arm64 · trixie

      Fixed · Fixed: 2.58.0-1

      dsa · glib2.0 · debian · 13

  • Source package: [glib2.0]

    Details (2)
    • 2.84.4-3~deb13u3 · amd64 · trixie

      Fixed · Fixed: 2.58.0-1

      dsa · glib2.0 · debian · 13

    • 2.84.4-3~deb13u3 · arm64 · trixie

      Fixed · Fixed: 2.58.0-1

      dsa · glib2.0 · debian · 13

  • Source package: [glib2.0]

    Details (2)
    • 2.84.4-3~deb13u3 · amd64 · trixie

      Fixed · Fixed: 2.58.0-1

      dsa · glib2.0 · debian · 13

    • 2.84.4-3~deb13u3 · arm64 · trixie

      Fixed · Fixed: 2.58.0-1

      dsa · glib2.0 · debian · 13

  • Source package: [glib2.0]

    Details (2)
    • 2.84.4-3~deb13u3 · amd64 · trixie

      Fixed · Fixed: 2.58.0-1

      dsa · glib2.0 · debian · 13

    • 2.84.4-3~deb13u3 · arm64 · trixie

      Fixed · Fixed: 2.58.0-1

      dsa · glib2.0 · debian · 13

  • Source package: [glib2.0]

    Details (2)
    • 2.84.4-3~deb13u3 · amd64 · trixie

      Fixed · Fixed: 2.58.0-1

      dsa · glib2.0 · debian · 13

    • 2.84.4-3~deb13u3 · arm64 · trixie

      Fixed · Fixed: 2.58.0-1

      dsa · glib2.0 · debian · 13

  • Source package: [glib2.0]

    Details (2)
    • 2.84.4-3~deb13u3 · amd64 · trixie

      Fixed · Fixed: 2.58.0-1

      dsa · glib2.0 · debian · 13

    • 2.84.4-3~deb13u3 · arm64 · trixie

      Fixed · Fixed: 2.58.0-1

      dsa · glib2.0 · debian · 13

  • Source package: [glib2.0]

    Details (2)
    • 2.84.4-3~deb13u3 · amd64 · trixie

      Fixed · Fixed: 2.58.0-1

      dsa · glib2.0 · debian · 13

    • 2.84.4-3~deb13u3 · arm64 · trixie

      Fixed · Fixed: 2.58.0-1

      dsa · glib2.0 · debian · 13

  • Source package: [glib2.0]

    Details (2)
    • 2.84.4-3~deb13u3 · amd64 · trixie

      Fixed · Fixed: 2.58.0-1

      dsa · glib2.0 · debian · 13

    • 2.84.4-3~deb13u3 · arm64 · trixie

      Fixed · Fixed: 2.58.0-1

      dsa · glib2.0 · debian · 13

  • Source package: [glib2.0]

    Details (2)
    • 2.84.4-3~deb13u3 · all · trixie

      Fixed · Fixed: 2.58.0-1

      dsa · glib2.0 · debian · 13

    • 2.84.4-3~deb13u3 · all · trixie

      Fixed · Fixed: 2.58.0-1

      dsa · glib2.0 · debian · 13

  • Source package: [glib2.0]

    Details (2)
    • 2.84.4-3~deb13u3 · amd64 · trixie

      Fixed · Fixed: 2.58.0-1

      dsa · glib2.0 · debian · 13

    • 2.84.4-3~deb13u3 · arm64 · trixie

      Fixed · Fixed: 2.58.0-1

      dsa · glib2.0 · debian · 13

Next results

Observed:

References