CVE-2019-9633

gio/gsocketclient.c in GNOME GLib 2.59.2 does not ensure that a parent GTask remains alive during the execution of a connection-attempting enumeration, which…

published March 8, 2019

CVSS
—
EPSS
2%
Percentile
83.4
In the wild
Unconfirmed
What it is

gio/gsocketclient.c in GNOME GLib 2.59.2 does not ensure that a parent GTask remains alive during the execution of a connection-attempting enumeration, which allows remote attackers to cause a denial of service (g_socket_client_connected_callback mishandling and application crash) via a crafted web site, as demonstrated by GNOME Web (aka Epiphany).

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02330 · 83.4th percentile
Published
2019-03-08T07:00Z
EPSS history
Timeline
  • 08 MAR 07:00Z
    gio/gsocketclient.c in GNOME GLib 2.59.2 does not ensure that a parent GTask remains alive during the execution of a connection-attempting enumeration, which…
    cvelistv5