CVE-2024-34397
An issue was discovered in GNOME GLib before 2.78.5, and 2.79.x and 2.80.x before 2.80.1. When a GDBus-based client subscribes to signals from a trusted system service such as NetworkManager on a shared computer, other users of the same computer can send spoofed D-Bus signals that the GDBus-based client will wrongly interpret as having been sent by the trusted system service. This could lead to the GDBus-based client behaving incorrectly, with an application-dependent impact.
- Affected products
- Alt Linux, Almalinux, Astra Linux, Centos, Gnome Glib, Linuxmint, Red Hat, Red Os
- Gnome Glib
- < 2.78.5, 2.80.1
- Fix
- Available
- CVSS 3.1
- 5.2 MEDIUM
- EPSS
- 0.8% (52th percentile)
- Weakness
- CWE-290
- NVD status
- Modified
- Published
- 2024-05-07
CVE-2024-34397 at NVD
No indexed exploits for CVE-2024-34397 yet
Our index is partial: it proves presence, never absence
No exploit for CVE-2024-34397 has been indexed yet. Our index is built from live traffic and upstream syncs, so this page can only say what it knows — not that no exploit exists.