GNOME glib-networking
cpe:2.3:a:gnome:glib-networking:*:*:*:*:*:*:*
A vulnerability exists in the OpenSSL backend of glib-networking due to improper handling of memory allocation return values. This oversight can lead to out-of-memory conditions, potentially causing writes to invalid memory locations. While this issue could result in uninitialized memory dereferences, the OpenSSL backend is not compiled by default in any Red Hat products, leaving no components affected.
Exploitation of this vulnerability can cause a denial-of-service condition by crashing the process. Additionally, it may lead to uninitialized memory dereferences, which can be exploited to execute unauthorized code or commands, read memory, or modify memory, particularly if privileged code can access certain memory addresses.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.