NetSight
IP …
medium4.8

CVE-2025-4373

A flaw was found in GLib, which is vulnerable to an integer overflow in the g_string_insert_unichar() function.

Impact

A flaw was found in GLib, which is vulnerable to an integer overflow in the g_string_insert_unichar() function. When the position at which to insert the character is large, the position will overflow, leading to a buffer underwrite.

Affected products

VendorProductAffected versions
Red HatRed Hat Enterprise Linux 10
Version patch: 0:2.80.4-4.el10_0.6
Red HatRed Hat OpenShift Distributed Tracing 3.6.0
Versions patch: rhosdt-3.6-1753265330, patch: rhosdt-3.6-1753265435, patch: rhosdt-3.6-1753265332, patch: rhosdt-3.6-1753265411, patch: rhosdt-3.6-1753269432, patch: rhosdt-3.6-1753265394
Red HatRed Hat Enterprise Linux 8.6 Telecommunications Update Service
Version patch: 0:2.56.4-158.el8_6.2
Red HatRed Hat Enterprise Linux 8.2 Advanced Update Support
Version patch: 0:2.56.4-8.el8_2.2
Red HatRed Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support
Version patch: 0:2.56.4-10.el8_4.2
Red HatRed Hat Insights Proxy 1.5
Version patch: 1.5.5-1754504343
Red HatRed Hat Enterprise Linux 8.8 Update Services For SAP Solutions
Version patch: 0:2.56.4-162.el8_8
Red HatRed Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On
Version patch: 0:2.56.4-10.el8_4.2
Red HatRed Hat Enterprise Linux 9
Version patch: 0:2.68.4-16.el9_6.2
Red HatRed Hat Enterprise Linux 9.0 Update Services For SAP Solutions
Version patch: 0:2.68.4-5.el9_0.2
Red HatRed Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support
Version patch: 0:2.56.4-158.el8_6.2
Red HatRed Hat Enterprise Linux 9.2 Update Services For SAP Solutions
Version patch: 0:2.68.4-7.el9_2.2

Weakness classification

CWE-124

References