CVE-2018-16428 — NULL Pointer Dereference in Glib

CWE-476 — NULL Pointer DereferenceCWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer14 documents8 sources
Severity
9.8CRITICALNVD
EPSS
0.7%
top 29.14%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Canonical Ubuntu LinuxGnome Glib
Timeline
PublishedSep 4
Latest updateMay 14

Description

In GNOME GLib 2.56.1, g_markup_parse_context_end_parse() in gmarkup.c has a NULL pointer dereference.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 3.9 | Impact: 5.9

Affected Packages1 packages

▶NVDgnome/glib2.56.1

Also affects: Ubuntu Linux 12.04, 14.04, 16.04, 18.04

Patches

Patch: gitlab.gnome.org ↗Patch: gitlab.gnome.org ↗

🔴Vulnerability Details

4
GHSA
GHSA-wj6v-2jfm-gw75: In GNOME GLib 2↗2022-05-14
▶
OSV
glib2.0 vulnerabilities↗2018-09-19
▶
OSV
CVE-2018-16428: In GNOME GLib 2↗2018-09-04
▶
CVEList
CVE-2018-16428: In GNOME GLib 2↗2018-09-04
▶

📋Vendor Advisories

4
Ubuntu
GLib vulnerabilities↗2018-09-19
▶
Ubuntu
GLib vulnerabilities↗2018-09-19
▶
Red Hat
glib2: NULL pointer dereference in g_markup_parse_context_end_parse() function in gmarkup.c↗2018-09-04
▶
Debian
CVE-2018-16428: glib2.0 - In GNOME GLib 2.56.1, g_markup_parse_context_end_parse() in gmarkup.c has a NULL...↗2018
▶

💬Community

5
Bugzilla
CVE-2018-16428 thunderbird: glib2: NULL pointer dereference in g_markup_parse_context_end_parse() function in gmarkup.c [fedora-all]↗2018-09-06
▶
Bugzilla
CVE-2018-16428 chromium: glib2: NULL pointer dereference in g_markup_parse_context_end_parse() function in gmarkup.c [fedora-all]↗2018-09-06
▶
Bugzilla
CVE-2018-16428 firefox: glib2: NULL pointer dereference in g_markup_parse_context_end_parse() function in gmarkup.c [fedora-all]↗2018-09-06
▶
Bugzilla
CVE-2018-16428 glib2: NULL pointer dereference in g_markup_parse_context_end_parse() function in gmarkup.c [fedora-all]↗2018-09-06
▶
Bugzilla
CVE-2018-16428 glib2: NULL pointer dereference in g_markup_parse_context_end_parse() function in gmarkup.c↗2018-09-06
▶
CVE-2018-16428 — NULL Pointer Dereference in Gnome Glib | cvebase