Privilege Escalation

2021-11-1722:36:12

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.001 Low

EPSS

Percentile

31.6%

JSON

glib2 is vulnerable to privilege escalation. The vulnerability exists due to the use of random charset alias and lack of sanitization of the authorization, leaking content from files owned by privileged users to unprivileged ones under the right condition.

CPENameOperatorVersion
glib2eq2.56.4__10.el8
glib2eq2.56.4__9.el8
glib2eq2.56.4__1.el8
glib2eq2.56.4__10.el8_4
glib2eq2.56.4__14.el8
glib2eq2.56.4__8.el8
glib2eq2.56.4__12.el8
glib2eq2.56.4__8.el8_3.1
glib2eq2.56.4__11.el8
glib2eq2.56.4__7.el8

Name	Operator	Version
glib2	eq	2.56.4__10.el8
glib2	eq	2.56.4__9.el8
glib2	eq	2.56.4__1.el8
glib2	eq	2.56.4__10.el8_4
glib2	eq	2.56.4__14.el8
glib2	eq	2.56.4__8.el8
glib2	eq	2.56.4__12.el8
glib2	eq	2.56.4__8.el8_3.1
glib2	eq	2.56.4__11.el8
glib2	eq	2.56.4__7.el8