Skip to content
Fencer Vulns
medium 4.7

CVE-2023-32636 json

A flaw was found in glib, where the gvariant deserialization code is vulnerable to a denial of...

published 2023-09-14 3 y ago modified 2026-10-15 25 d ago also EUVD-2023-36879 , JLSEC-2025-162

cvss
4.7
version 3.1, CNA
cisa kev
Not listed
not in CISA's catalog
epss
0.8%
EPSS 0.8% chance of exploitation in 30 days, percentile 56%
public exploits
0
none known

Summary

A flaw was found in glib, where the gvariant deserialization code is vulnerable to a denial of service introduced by additional input validation added to resolve CVE-2023-29499. The offset table validation may be very slow. This bug does not affect any released version of glib but does affect glib distributors who followed the guidance of glib developers to backport the initial fix for CVE-2023-29499.

Patch / fix

  • julia Glib_jll 2.76.5+0
  • Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP V3.1.5
  • Siemens SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP V3.1.5
  • Siemens SIPLUS S7-1500 CPU 1518-4 PN/DP MFP V3.1.5
  • glib2.0 Ubuntu 20.04 LTS 2.64.6-1~ubuntu20.04.6
  • glib2.0 Ubuntu 22.04 LTS 2.72.4-0ubuntu2.2
  • glib2.0 Ubuntu Pro 14.04 LTS 2.40.2-0ubuntu1.1+esm6
  • glib2.0 Ubuntu Pro 16.04 LTS 2.48.2-0ubuntu4.8+esm3
  • glib2.0 Ubuntu Pro 18.04 LTS 2.56.4-0ubuntu0.18.04.9+esm3

ubuntu advisories UBUNTU-CVE-2023-32636

Ubuntu security data © Canonical Ltd., from https://github.com/canonical/ubuntu-security-notices via OSV; changed: normalised to fixed package versions per release. CC BY-SA 4.0

  • mingw-glib2 RHEL 9 2.78.0-1.el9
  • mingw32-glib2 RHEL 9 2.78.0-1.el9
  • mingw64-glib2 RHEL 9 2.78.0-1.el9

red hat advisories RHSA-2024:2528

  • glib2 SLES for SAP 15 SP1, SLES 15 SP1-LTSS, SLE High Performance Computing 15 SP1-LTSS +1 more 2.54.3-150000.4.29.1

suse advisories SUSE-SU-2023:3535-1

  • mingw32-glib2 AlmaLinux 9 2.78.0-1.el9
  • mingw64-glib2 AlmaLinux 9 2.78.0-1.el9

almalinux advisories ALSA-2024:2528

  • glib CBL-Mariner 2.0 2.71.0-4

azure linux advisories AZL-28778

Azure Linux vulnerability data, Copyright (c) Microsoft Corporation, from https://github.com/microsoft/AzureLinuxVulnerabilityData via OSV, under the MIT licence; changed: normalised to fixed package versions per release. MIT

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

red hat product security vex CVE-2023-32636 updated cvss 6.2

glib: Timeout in fuzz_variant_text

  • Red Hat Enterprise Linux 6 glib2 Red Hat Enterprise Linux 7 glib2, glib2-fam, glib2-tests
    affected: no fix planned “Out of support scope”
  • Red Hat Enterprise Linux 8 glib2, glib2-fam, glib2-tests Red Hat Enterprise Linux 9 glib2, glib2-tests
    affected: no fix available “Fix deferred”
  • Red Hat OpenShift AI (RHOAI) rhoai/odh-core-bff-rhel9, rhoai/odh-dashboard-rhel9, rhoai/odh-mod-arch-maas-rhel9, rhoai/odh-mod-arch-automl-rhel9, rhoai/odh-mod-arch-gen-ai-rhel9, rhoai/odh-mod-arch-mlflow-rhel9, +6 more
    under investigation
  • Red Hat Enterprise Linux CRB (v. 9) mingw-glib2 2.78.0-1.el9, mingw32-glib2 2.78.0-1.el9, mingw64-glib2 2.78.0-1.el9
    fixed: vendor fix RHSA-2024:2528
  • Red Hat OpenShift AI (RHOAI) rhoai/odh-mlflow-rhel9, rhoai/odh-kube-rbac-proxy-rhel9, rhoai/odh-maas-controller-rhel9, rhoai/odh-mlflow-operator-rhel9, rhoai/odh-model-controller-rhel9, rhoai/odh-ogx-k8s-operator-rhel9, +14 more
    not affected: vulnerable code not present

Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf

cisa ICSA-23-348-10 updated cvss 4.7

Siemens SIMATIC S7-1500

  • Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AB0) >= 3.1.0, < 3.1.5 Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AC0) >= 3.1.0, < 3.1.5 Siemens SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AB0) >= 3.1.0, < 3.1.5 Siemens SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AC0) >= 3.1.0, < 3.1.5 Siemens SIPLUS S7-1500 CPU 1518-4 PN/DP MFP (6AG1518-4AX00-4AC0) >= 3.1.0, < 3.1.5
    affected: fixed in V3.1.5, mitigation support.industry.siemens.com

Facts from CISA's republication of the vendor's own advisory (CSAF); the linked advisory is the authoritative source. CISA notification · csaf

CISA SSVC

Exploitation
none
Automatable
no
Technical impact
partial
Assessed
2 y ago

Exploit prediction

0.79% chance of exploitation in the next 30 days, higher than 56% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by version score vector
CNA 3.1 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
NVD 3.1 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
OSV 3.1 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected packages

ecosystem package affected fixed in
julia Glib_jll
<2.76.5+0
2.76.5+0

Affected products

  • glib glib
  • Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP
  • Siemens SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP
  • Siemens SIPLUS S7-1500 CPU 1518-4 PN/DP MFP

Classification

Weakness
  • CWE-400 Uncontrolled Resource Consumption
  • CWE-502 Deserialization of Untrusted Data

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.