CVE-2024-52533

gio/gsocks4aproxy.c in GNOME GLib before 2.82.1 has an off-by-one error and resultant buffer overflow because SOCKS4_CONN_MSG_LEN is not sufficient for a trailing '\0' character.

Score: CVSS 3.1 9.8 Critical
Status: Modified - cve@mitre.org
Published: 2024-11-11
Last modified: 2026-10-15
Weaknesses: CWE-120

Affected products

Debian Linux (Debian)
Glib (Gnome)
Active Iq Unified Manager (Netapp)
Ontap Tools (Netapp)
12xfo (Siemens)
24xsfp (Siemens)
2x10g (Siemens)
8xfo (Siemens)
8xsfp (Siemens)
Cc (Siemens)
Ruggedcom Rox Mx5000 (Siemens)
Ruggedcom Rox Mx5000re (Siemens)
Ruggedcom Rox Rx1400 (Siemens)
Ruggedcom Rox Rx1500 (Siemens)
Ruggedcom Rox Rx1501 (Siemens)
Ruggedcom Rox Rx1510 (Siemens)
Ruggedcom Rox Rx1511 (Siemens)
Ruggedcom Rox Rx1512 (Siemens)
Ruggedcom Rox Rx1524 (Siemens)
Ruggedcom Rox Rx1536 (Siemens)
Ruggedcom Rox Rx5000 (Siemens)
Ruggedcom Rst2428p (Siemens)
Scalance Xc-300xr-300xc-400xr-500wgxr-500 Family (Siemens)
Scalance Xch328 (Siemens)
Scalance Xcm324 (Siemens)
Scalance Xcm328 (Siemens)
Scalance Xcm332 (Siemens)
Scalance Xrh334 24 V Dc (Siemens)
Scalance Xrm334 230 V Ac (Siemens)
Scalance Xrm334 230v Ac (Siemens)
Scalance Xrm334 24 V Dc (Siemens)
Scalance Xrm334 24v Dc (Siemens)
Scalance Xrm334 2x230 V Ac (Siemens)
Scalance Xrm334 2x230v Ac (Siemens)
Simatic S7-1500 Cpu 1518-4 Pndp Mfp (Siemens)
Simatic S7-1500 Cpu 1518f-4 Pndp Mfp (Siemens)
Siplus S7-1500 Cpu 1518-4 Pndp Mfp (Siemens)

References

https://gitlab.gnome.org/Teams/Releng/security/-/wikis/home
https://gitlab.gnome.org/GNOME/glib/-/issues/3461
https://gitlab.gnome.org/GNOME/glib/-/releases/2.82.1
http://www.openwall.com/lists/oss-security/2024/11/12/11
https://lists.debian.org/debian-lts-announce/2024/11/msg00020.html
https://security.netapp.com/advisory/ntap-20241206-0009/
https://cert-portal.siemens.com/productcert/html/ssa-398330.html
https://cert-portal.siemens.com/productcert/html/ssa-202008.html
https://cert-portal.siemens.com/productcert/html/ssa-089022.html