CVE catalog

CVE-2024-34397

GLib vulnerability

[CVE catalog]

Severity
Medium · CVSS 5.2CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L
Published
Source
[NVD] · [CVE record]
EPSS
0.76% · Oct 25, 2026

An issue was discovered in GNOME GLib before 2.78.5, and 2.79.x and 2.80.x before 2.80.1. When a GDBus-based client subscribes to signals from a trusted system service such as NetworkManager on a shared computer, other users of the same computer can send spoofed D-Bus signals that the GDBus-based client will wrongly interpret as having been sent by the trusted system service. This could lead to the GDBus-based client behaving incorrectly, with an application-dependent impact.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianglib2.0sid2.90.1-2fixed
Debianglib2.0forky2.90.1-2fixed
Debianglib2.0trixie2.84.4-3~deb13u5fixed
Debianglib2.0bookworm2.74.6-2+deb12u9fixed
Debianglib2.0bookworm-security2.74.6-2+deb12u2fixed
Ubuntuglib2.0noble2.80.0-6ubuntu3.1fixed
Ubuntugir1.2-girepository-3.0noble2.80.0-6ubuntu3.1fixed
Ubuntugir1.2-girepository-3.0-devnoble2.80.0-6ubuntu3.1fixed
Ubuntugir1.2-glib-2.0noble2.80.0-6ubuntu3.1fixed
Ubuntugir1.2-glib-2.0-devnoble2.80.0-6ubuntu3.1fixed
Ubuntulibgirepository-2.0-0noble2.80.0-6ubuntu3.1fixed
Ubuntulibgirepository-2.0-devnoble2.80.0-6ubuntu3.1fixed
Ubuntulibglib2.0-0t64noble2.80.0-6ubuntu3.1fixed
Ubuntulibglib2.0-binnoble2.80.0-6ubuntu3.1fixed
Ubuntulibglib2.0-datanoble2.80.0-6ubuntu3.1fixed
Ubuntulibglib2.0-devnoble2.80.0-6ubuntu3.1fixed
Ubuntulibglib2.0-dev-binnoble2.80.0-6ubuntu3.1fixed
Ubuntulibglib2.0-docnoble2.80.0-6ubuntu3.1fixed
Ubuntulibglib2.0-testsnoble2.80.0-6ubuntu3.1fixed
Ubuntuglib2.0pro2.54.1-1ubuntu1vulnerable
Ubuntuglib2.0pro2.55.2-2ubuntu1vulnerable
Ubuntuglib2.0pro2.56.0-2ubuntu1vulnerable
Ubuntuglib2.0pro2.56.0-4ubuntu1vulnerable
Ubuntuglib2.0pro2.56.1-2ubuntu1vulnerable
Ubuntuglib2.0pro2.56.2-0ubuntu0.18.04.1vulnerable
Ubuntuglib2.0pro2.56.2-0ubuntu0.18.04.2vulnerable
Ubuntuglib2.0pro2.56.3-0ubuntu0.18.04.1vulnerable
Ubuntuglib2.0pro2.56.4-0ubuntu0.18.04.2vulnerable
Ubuntuglib2.0pro2.56.4-0ubuntu0.18.04.3vulnerable
Ubuntuglib2.0pro2.56.4-0ubuntu0.18.04.4vulnerable
Ubuntuglib2.0pro2.56.4-0ubuntu0.18.04.5vulnerable
Ubuntuglib2.0pro2.56.4-0ubuntu0.18.04.6vulnerable
Ubuntuglib2.0pro2.56.4-0ubuntu0.18.04.7vulnerable
Ubuntuglib2.0pro2.56.4-0ubuntu0.18.04.8vulnerable
Ubuntuglib2.0pro2.56.4-0ubuntu0.18.04.9vulnerable
Ubuntuglib2.0pro2.56.4-0ubuntu0.18.04.9+esm3vulnerable
Ubuntuglib2.0pro2.56.4-0ubuntu0.18.04.9+esm4vulnerable
Ubuntuglib2.0pro2.56.4-0ubuntu0.18.04.9+esm5vulnerable
Ubuntuglib2.0pro2.56.4-0ubuntu0.18.04.9+esm6vulnerable
Ubuntuglib2.020.042.62.1-1vulnerable
Ubuntuglib2.020.042.63.1-2vulnerable
Ubuntuglib2.020.042.63.1-2ubuntu1vulnerable
Ubuntuglib2.020.042.63.3-1vulnerable
Ubuntuglib2.020.042.63.3-3vulnerable
Ubuntuglib2.020.042.63.5-2vulnerable
Ubuntuglib2.020.042.64.0-1vulnerable
Ubuntuglib2.020.042.64.1-1vulnerable
Ubuntuglib2.020.042.64.2-1~fakesync1vulnerable
Ubuntuglib2.020.042.64.3-1~ubuntu20.04.1vulnerable
Ubuntuglib2.020.042.64.6-1~ubuntu20.04.1vulnerable
Ubuntuglib2.020.042.64.6-1~ubuntu20.04.2vulnerable
Ubuntuglib2.020.042.64.6-1~ubuntu20.04.3vulnerable
Ubuntuglib2.020.042.64.6-1~ubuntu20.04.4vulnerable
Ubuntuglib2.020.042.64.6-1~ubuntu20.04.6vulnerable
Ubuntuglib2.020.042.64.6-1~ubuntu20.04.7fixed
Ubuntuglib2.022.042.68.4-1ubuntu1vulnerable
Ubuntuglib2.022.042.70.1-1vulnerable
Ubuntuglib2.022.042.70.2-1vulnerable
Ubuntuglib2.022.042.71.0-2vulnerable
Ubuntuglib2.022.042.71.1-1vulnerable
Ubuntuglib2.022.042.71.2-1vulnerable
Ubuntuglib2.022.042.71.3-1vulnerable
Ubuntuglib2.022.042.72.0-1vulnerable
Ubuntuglib2.022.042.72.1-1vulnerable
Ubuntuglib2.022.042.72.4-0ubuntu1vulnerable
Ubuntuglib2.022.042.72.4-0ubuntu2vulnerable
Ubuntuglib2.022.042.72.4-0ubuntu2.2vulnerable
Ubuntuglib2.022.042.72.4-0ubuntu2.3fixed
Ubuntuglib2.024.042.78.0-2vulnerable
Ubuntuglib2.024.042.78.1-4vulnerable
Ubuntuglib2.024.042.78.3-1vulnerable
Ubuntuglib2.024.042.78.3-2vulnerable
Ubuntuglib2.024.042.79.1-1vulnerable
Ubuntuglib2.024.042.79.2-1~ubuntu1vulnerable
Ubuntuglib2.024.042.79.3-3ubuntu5vulnerable
Ubuntuglib2.024.042.80.0-6ubuntu1vulnerable
Ubuntuglib2.024.042.80.0-6ubuntu3vulnerable
Ubuntuglib2.024.042.80.0-6ubuntu3.1fixed
Alpineglib3.192.78.5-r0fixed
Alpineglib3.202.80.1-r0fixed
Alpineglib3.212.80.1-r0fixed
Alpineglib3.222.80.1-r0fixed
Alpineglib3.232.80.1-r0fixed
Alpineglib3.242.80.1-r0fixed
Ubuntuglib2.020.042.62.1-1vulnerable
Ubuntuglib2.020.042.63.1-2vulnerable
Ubuntuglib2.020.042.63.1-2ubuntu1vulnerable
Ubuntuglib2.020.042.63.3-1vulnerable
Ubuntuglib2.020.042.63.3-3vulnerable
Ubuntuglib2.020.042.63.5-2vulnerable
Ubuntuglib2.020.042.64.0-1vulnerable
Ubuntuglib2.020.042.64.1-1vulnerable
Ubuntuglib2.020.042.64.2-1~fakesync1vulnerable
Ubuntuglib2.020.042.64.3-1~ubuntu20.04.1vulnerable
Ubuntuglib2.020.042.64.6-1~ubuntu20.04.1vulnerable
Ubuntuglib2.020.042.64.6-1~ubuntu20.04.2vulnerable
Ubuntuglib2.020.042.64.6-1~ubuntu20.04.3vulnerable
Ubuntuglib2.020.042.64.6-1~ubuntu20.04.4vulnerable
Ubuntuglib2.020.042.64.6-1~ubuntu20.04.6vulnerable
Ubuntuglib2.020.042.64.6-1~ubuntu20.04.7fixed
Ubuntuglib2.022.042.68.4-1ubuntu1vulnerable
Ubuntuglib2.022.042.70.1-1vulnerable
Ubuntuglib2.022.042.70.2-1vulnerable
Ubuntuglib2.022.042.71.0-2vulnerable
Ubuntuglib2.022.042.71.1-1vulnerable
Ubuntuglib2.022.042.71.2-1vulnerable
Ubuntuglib2.022.042.71.3-1vulnerable
Ubuntuglib2.022.042.72.0-1vulnerable
Ubuntuglib2.022.042.72.1-1vulnerable
Ubuntuglib2.022.042.72.4-0ubuntu1vulnerable
Ubuntuglib2.022.042.72.4-0ubuntu2vulnerable
Ubuntuglib2.022.042.72.4-0ubuntu2.2vulnerable
Ubuntuglib2.022.042.72.4-0ubuntu2.3fixed
Ubuntuglib2.024.042.78.0-2vulnerable
Ubuntuglib2.024.042.78.1-4vulnerable
Ubuntuglib2.024.042.78.3-1vulnerable
Ubuntuglib2.024.042.78.3-2vulnerable
Ubuntuglib2.024.042.79.1-1vulnerable
Ubuntuglib2.024.042.79.2-1~ubuntu1vulnerable
Ubuntuglib2.024.042.79.3-3ubuntu5vulnerable
Ubuntuglib2.024.042.80.0-6ubuntu1vulnerable
Ubuntuglib2.024.042.80.0-6ubuntu3vulnerable
Ubuntuglib2.024.042.80.0-6ubuntu3.1fixed
Suseglib2linux micro 6.02.76.2-5.1fixed
Suseglib2linux enterprise micro 5.12.62.6-150200.3.21.1fixed
Suseglib2linux enterprise micro 5.22.62.6-150200.3.21.1fixed
Suseglib2linux enterprise module for basesystem 15 sp62.78.6-150600.4.3.1fixed
Suseglib2-branding-SLElinux enterprise module for basesystem 15 sp615-150600.35.2.1fixed
Opensuseglib2leap 15.62.78.6-150600.4.3.1fixed
Opensuseglib2-branding-SLEleap 15.615-150600.35.2.1fixed
Opensuseglib2-docleap 15.62.78.6-150600.4.3.1fixed
Suseglib2linux enterprise micro 5.52.70.5-150400.3.11.1fixed
Suseglib2linux enterprise micro 5.32.70.5-150400.3.14.1fixed
Suseglib2linux enterprise micro 5.42.70.5-150400.3.14.1fixed
Suseglib2linux enterprise micro 5.52.70.5-150400.3.14.1fixed
Suseglib2linux enterprise module for basesystem 15 sp52.70.5-150400.3.14.1fixed
Opensuseglib2leap micro 5.52.70.5-150400.3.14.1fixed
Opensuseglib2leap 15.52.70.5-150400.3.14.1fixed
Opensuseglib2-docleap 15.52.70.5-150400.3.14.1fixed
Suseglib2linux enterprise micro 5.12.62.6-150200.3.18.1fixed
Suseglib2linux enterprise micro 5.22.62.6-150200.3.18.1fixed
Suseglib2linux enterprise micro 5.32.70.5-150400.3.11.1fixed
Suseglib2linux enterprise micro 5.42.70.5-150400.3.11.1fixed
Suseglib2linux enterprise micro 5.52.70.5-150400.3.11.1fixed
Suseglib2linux enterprise module for basesystem 15 sp52.70.5-150400.3.11.1fixed
Opensuseglib2leap micro 5.32.70.5-150400.3.11.1fixed
Opensuseglib2leap micro 5.42.70.5-150400.3.11.1fixed
Opensuseglib2leap 15.52.70.5-150400.3.11.1fixed
Opensuseglib2-docleap 15.52.70.5-150400.3.11.1fixed
Suseglib2linux enterprise software development kit 12 sp52.48.2-12.40.1fixed
Suseglib2linux enterprise server 12 sp52.48.2-12.40.1fixed
Suseglib2linux enterprise server for sap applications 12 sp52.48.2-12.40.1fixed
Suseglib2linux enterprise workstation extension 12 sp52.48.2-12.40.1fixed
Suseglib2linux enterprise software development kit 12 sp52.48.2-12.37.1fixed
Suseglib2linux enterprise server 12 sp52.48.2-12.37.1fixed
Suseglib2linux enterprise server for sap applications 12 sp52.48.2-12.37.1fixed
Suseglib2linux enterprise workstation extension 12 sp52.48.2-12.37.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianglib2.0sourcesid2.80.0-10not yet assignedNot reportedNot reported
Debianglib2.0sourceforky2.80.0-10not yet assignedNot reportedNot reported
Debianglib2.0sourcetrixie2.80.0-10not yet assignedNot reportedNot reported
Debianglib2.0sourcebookworm2.74.6-2+deb12u1not yet assignedNot reportedNot reported
Ubuntuglib2.0debnoble2.80.0-6ubuntu3.1Not reportedNot reportedNot reported
Ubuntugir1.2-girepository-3.0debnoble2.80.0-6ubuntu3.1Not reportedNot reportedNot reported
Ubuntugir1.2-girepository-3.0-devdebnoble2.80.0-6ubuntu3.1Not reportedNot reportedNot reported
Ubuntugir1.2-glib-2.0debnoble2.80.0-6ubuntu3.1Not reportedNot reportedNot reported
Ubuntugir1.2-glib-2.0-devdebnoble2.80.0-6ubuntu3.1Not reportedNot reportedNot reported
Ubuntulibgirepository-2.0-0debnoble2.80.0-6ubuntu3.1Not reportedNot reportedNot reported
Ubuntulibgirepository-2.0-devdebnoble2.80.0-6ubuntu3.1Not reportedNot reportedNot reported
Ubuntulibglib2.0-0t64debnoble2.80.0-6ubuntu3.1Not reportedNot reportedNot reported
Ubuntulibglib2.0-bindebnoble2.80.0-6ubuntu3.1Not reportedNot reportedNot reported
Ubuntulibglib2.0-datadebnoble2.80.0-6ubuntu3.1Not reportedNot reportedNot reported
Ubuntulibglib2.0-devdebnoble2.80.0-6ubuntu3.1Not reportedNot reportedNot reported
Ubuntulibglib2.0-dev-bindebnoble2.80.0-6ubuntu3.1Not reportedNot reportedNot reported
Ubuntulibglib2.0-docdebnoble2.80.0-6ubuntu3.1Not reportedNot reportedNot reported
Ubuntulibglib2.0-testsdebnoble2.80.0-6ubuntu3.1Not reportedNot reportedNot reported
Ubuntuglib2.0deb20.042.64.6-1~ubuntu20.04.7Not reportedUBUNTU-CVE-2024-34397Not reported
Ubuntuglib2.0deb22.042.72.4-0ubuntu2.3Not reportedUBUNTU-CVE-2024-34397Not reported
Ubuntuglib2.0deb24.042.80.0-6ubuntu3.1Not reportedUBUNTU-CVE-2024-34397Not reported
Alpineglibapk3.192.78.5-r0Not reportedALPINE-CVE-2024-34397Not reported
Alpineglibapk3.202.80.1-r0Not reportedALPINE-CVE-2024-34397Not reported
Alpineglibapk3.212.80.1-r0Not reportedALPINE-CVE-2024-34397Not reported
Alpineglibapk3.222.80.1-r0Not reportedALPINE-CVE-2024-34397Not reported
Alpineglibapk3.232.80.1-r0Not reportedALPINE-CVE-2024-34397Not reported
Alpineglibapk3.242.80.1-r0Not reportedALPINE-CVE-2024-34397Not reported
Ubuntuglib2.0deb20.042.64.6-1~ubuntu20.04.7Not reportedUSN-6768-1Not reported
Ubuntuglib2.0deb22.042.72.4-0ubuntu2.3Not reportedUSN-6768-1Not reported
Ubuntuglib2.0deb24.042.80.0-6ubuntu3.1Not reportedUSN-6768-1Not reported
Suseglib2rpmlinux micro 6.02.76.2-5.1Not reportedSUSE-SU-2025:20031-1Not reported
Suseglib2rpmlinux enterprise micro 5.12.62.6-150200.3.21.1Not reportedSUSE-SU-2024:2998-1Not reported
Suseglib2rpmlinux enterprise micro 5.22.62.6-150200.3.21.1Not reportedSUSE-SU-2024:2998-1Not reported
Suseglib2rpmlinux enterprise module for basesystem 15 sp62.78.6-150600.4.3.1Not reportedSUSE-SU-2024:1950-1Not reported
Suseglib2-branding-SLErpmlinux enterprise module for basesystem 15 sp615-150600.35.2.1Not reportedSUSE-SU-2024:1950-1Not reported
Opensuseglib2rpmleap 15.62.78.6-150600.4.3.1Not reportedSUSE-SU-2024:1950-1Not reported
Opensuseglib2-branding-SLErpmleap 15.615-150600.35.2.1Not reportedSUSE-SU-2024:1950-1Not reported
Opensuseglib2-docrpmleap 15.62.78.6-150600.4.3.1Not reportedSUSE-SU-2024:1950-1Not reported
Suseglib2rpmlinux enterprise micro 5.52.70.5-150400.3.11.1Not reportedSUSE-SU-2024:1830-2Not reported
Suseglib2rpmlinux enterprise micro 5.32.70.5-150400.3.14.1Not reportedSUSE-SU-2024:3086-1Not reported
Suseglib2rpmlinux enterprise micro 5.42.70.5-150400.3.14.1Not reportedSUSE-SU-2024:3086-1Not reported
Suseglib2rpmlinux enterprise micro 5.52.70.5-150400.3.14.1Not reportedSUSE-SU-2024:3086-1Not reported
Suseglib2rpmlinux enterprise module for basesystem 15 sp52.70.5-150400.3.14.1Not reportedSUSE-SU-2024:3086-1Not reported
Opensuseglib2rpmleap micro 5.52.70.5-150400.3.14.1Not reportedSUSE-SU-2024:3086-1Not reported
Opensuseglib2rpmleap 15.52.70.5-150400.3.14.1Not reportedSUSE-SU-2024:3086-1Not reported
Opensuseglib2-docrpmleap 15.52.70.5-150400.3.14.1Not reportedSUSE-SU-2024:3086-1Not reported
Suseglib2rpmlinux enterprise micro 5.12.62.6-150200.3.18.1Not reportedSUSE-SU-2024:2247-1Not reported
Suseglib2rpmlinux enterprise micro 5.22.62.6-150200.3.18.1Not reportedSUSE-SU-2024:2247-1Not reported
Suseglib2rpmlinux enterprise micro 5.32.70.5-150400.3.11.1Not reportedSUSE-SU-2024:1830-1Not reported
Suseglib2rpmlinux enterprise micro 5.42.70.5-150400.3.11.1Not reportedSUSE-SU-2024:1830-1Not reported
Suseglib2rpmlinux enterprise micro 5.52.70.5-150400.3.11.1Not reportedSUSE-SU-2024:1830-1Not reported
Suseglib2rpmlinux enterprise module for basesystem 15 sp52.70.5-150400.3.11.1Not reportedSUSE-SU-2024:1830-1Not reported
Opensuseglib2rpmleap micro 5.32.70.5-150400.3.11.1Not reportedSUSE-SU-2024:1830-1Not reported
Opensuseglib2rpmleap micro 5.42.70.5-150400.3.11.1Not reportedSUSE-SU-2024:1830-1Not reported
Opensuseglib2rpmleap 15.52.70.5-150400.3.11.1Not reportedSUSE-SU-2024:1830-1Not reported
Opensuseglib2-docrpmleap 15.52.70.5-150400.3.11.1Not reportedSUSE-SU-2024:1830-1Not reported
Suseglib2rpmlinux enterprise software development kit 12 sp52.48.2-12.40.1Not reportedSUSE-SU-2024:3208-1Not reported
Suseglib2rpmlinux enterprise server 12 sp52.48.2-12.40.1Not reportedSUSE-SU-2024:3208-1Not reported
Suseglib2rpmlinux enterprise server for sap applications 12 sp52.48.2-12.40.1Not reportedSUSE-SU-2024:3208-1Not reported
Suseglib2rpmlinux enterprise workstation extension 12 sp52.48.2-12.40.1Not reportedSUSE-SU-2024:3208-1Not reported
Suseglib2rpmlinux enterprise software development kit 12 sp52.48.2-12.37.1Not reportedSUSE-SU-2024:1833-1Not reported
Suseglib2rpmlinux enterprise server 12 sp52.48.2-12.37.1Not reportedSUSE-SU-2024:1833-1Not reported
Suseglib2rpmlinux enterprise server for sap applications 12 sp52.48.2-12.37.1Not reportedSUSE-SU-2024:1833-1Not reported
Suseglib2rpmlinux enterprise workstation extension 12 sp52.48.2-12.37.1Not reportedSUSE-SU-2024:1833-1Not reported

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

References