Integer overflow in Gnome GLib - CVE-2025-3360

Vulnerability identifier: #VU107990

CSH Severity: Medium

CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]

CVE-ID: CVE-2025-3360

CWE-ID: CWE-190

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to integer overflow with the g_date_time_new_from_iso8601() function when parsing a long invalid ISO 8601 timestamp. A remote attacker can pass specially crafted data to the application, trigger an integer overflow and perform a denial of service (DoS) attack.

Gnome GLib
SUSE Linux Enterprise Desktop 15
SUSE Linux Enterprise Real Time 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise Micro for Rancher
SUSE Linux Enterprise Micro
Ubuntu
Basesystem Module
openSUSE Leap
openEuler
SmartFabric Manager
APEX Cloud Platform for Microsoft Azure
Cloud Pak for Data System - Cyclops
glib2.0 (Ubuntu package)
libglib-2_0-0
libgthread-2_0-0-32bit
libgmodule-2_0-0
libgmodule-2_0-0-debuginfo
glib2-tests-devel
glib2-devel-static
glib2-tests-devel-debuginfo
libgthread-2_0-0-debuginfo
libgio-2_0-0-debuginfo
libgio-2_0-0-32bit-debuginfo
libgio-2_0-0-32bit
libglib-2_0-0-32bit-debuginfo
glib2-tools
libgio-2_0-0
glib2-doc
glib2-devel
libgobject-2_0-0
libgthread-2_0-0
glib2-tools-debuginfo
glib2-lang
gio-branding-upstream
glib2-debugsource
glib2-devel-debuginfo
libglib-2_0-0-debuginfo
libgobject-2_0-0-debuginfo
libgobject-2_0-0-32bit
libgthread-2_0-0-64bit
libglib-2_0-0-64bit-debuginfo
glib2-tools-64bit
glib2-devel-64bit-debuginfo
libgobject-2_0-0-64bit-debuginfo
glib2-tools-64bit-debuginfo
glib2-devel-64bit
libgobject-2_0-0-64bit
libgmodule-2_0-0-64bit
libgthread-2_0-0-64bit-debuginfo
libglib-2_0-0-64bit
libgio-2_0-0-64bit
libgmodule-2_0-0-64bit-debuginfo
libgmodule-2_0-0-32bit
libgthread-2_0-0-32bit-debuginfo
libgmodule-2_0-0-32bit-debuginfo
glib2-tools-32bit
libglib-2_0-0-32bit
glib2-devel-32bit-debuginfo
glib2-tools-32bit-debuginfo
libgio-2_0-0-64bit-debuginfo
libgobject-2_0-0-32bit-debuginfo
glib2-devel-32bit
glib2-static
glib2-help
glib2-tests
glib2-debuginfo
glib2
Splunk Operator for Kubernetes Add-on
APEX Cloud Platform for Red Hat OpenShift

Install updates from vendor's website.

Gnome GLib - update to 2.82.5
SmartFabric Manager - update to 1.3.0
APEX Cloud Platform for Microsoft Azure - update to 01.05.01.00
glib2.0 (Ubuntu package) - addressed in versions 2.40.2-0ubuntu1.1+esm7, 2.48.2-0ubuntu4.8+esm5, 2.56.4-0ubuntu0.18.04.9+esm5, 2.64.6-1~ubuntu20.04.9+esm1, 2.72.4-0ubuntu2.7, 2.80.0-6ubuntu3.6, 2.84.1-1ubuntu0.2, 2.86.0-2ubuntu0.1
libglib-2_0-0 - addressed in versions 2.70.5-150400.3.20.1, 2.78.6-150600.4.11.1
libgthread-2_0-0-32bit - addressed in versions 2.70.5-150400.3.20.1, 2.78.6-150600.4.11.1
libgmodule-2_0-0 - addressed in versions 2.70.5-150400.3.20.1, 2.78.6-150600.4.11.1
libgmodule-2_0-0-debuginfo - addressed in versions 2.70.5-150400.3.20.1, 2.78.6-150600.4.11.1
glib2-tests-devel - addressed in versions 2.70.5-150400.3.20.1, 2.78.6-150600.4.11.1
glib2-devel-static - addressed in versions 2.70.5-150400.3.20.1, 2.78.6-150600.4.11.1
glib2-tests-devel-debuginfo - addressed in versions 2.70.5-150400.3.20.1, 2.78.6-150600.4.11.1
libgthread-2_0-0-debuginfo - addressed in versions 2.70.5-150400.3.20.1, 2.78.6-150600.4.11.1
libgio-2_0-0-debuginfo - addressed in versions 2.70.5-150400.3.20.1, 2.78.6-150600.4.11.1
libgio-2_0-0-32bit-debuginfo - addressed in versions 2.70.5-150400.3.20.1, 2.78.6-150600.4.11.1
libgio-2_0-0-32bit - addressed in versions 2.70.5-150400.3.20.1, 2.78.6-150600.4.11.1
libglib-2_0-0-32bit-debuginfo - addressed in versions 2.70.5-150400.3.20.1, 2.78.6-150600.4.11.1
glib2-tools - addressed in versions 2.70.5-150400.3.20.1, 2.78.6-150600.4.11.1
libgio-2_0-0 - addressed in versions 2.70.5-150400.3.20.1, 2.78.6-150600.4.11.1
glib2-doc - addressed in versions 2.70.5-150400.3.20.1, 2.78.6-150600.4.11.1
glib2-devel - addressed in versions 2.70.5-150400.3.20.1, 2.78.6-150600.4.11.1
libgobject-2_0-0 - addressed in versions 2.70.5-150400.3.20.1, 2.78.6-150600.4.11.1
libgthread-2_0-0 - addressed in versions 2.70.5-150400.3.20.1, 2.78.6-150600.4.11.1
glib2-tools-debuginfo - addressed in versions 2.70.5-150400.3.20.1, 2.78.6-150600.4.11.1
glib2-lang - addressed in versions 2.70.5-150400.3.20.1, 2.78.6-150600.4.11.1
gio-branding-upstream - addressed in versions 2.70.5-150400.3.20.1, 2.78.6-150600.4.11.1
glib2-debugsource - addressed in versions 2.70.5-150400.3.20.1, 2.78.6-150600.4.11.1
glib2-devel-debuginfo - addressed in versions 2.70.5-150400.3.20.1, 2.78.6-150600.4.11.1
libglib-2_0-0-debuginfo - addressed in versions 2.70.5-150400.3.20.1, 2.78.6-150600.4.11.1
libgobject-2_0-0-debuginfo - addressed in versions 2.70.5-150400.3.20.1, 2.78.6-150600.4.11.1
libgobject-2_0-0-32bit - addressed in versions 2.70.5-150400.3.20.1, 2.78.6-150600.4.11.1
libgthread-2_0-0-64bit - addressed in versions 2.70.5-150400.3.20.1, 2.78.6-150600.4.11.1
libglib-2_0-0-64bit-debuginfo - addressed in versions 2.70.5-150400.3.20.1, 2.78.6-150600.4.11.1
glib2-tools-64bit - addressed in versions 2.70.5-150400.3.20.1, 2.78.6-150600.4.11.1
glib2-devel-64bit-debuginfo - addressed in versions 2.70.5-150400.3.20.1, 2.78.6-150600.4.11.1
libgobject-2_0-0-64bit-debuginfo - addressed in versions 2.70.5-150400.3.20.1, 2.78.6-150600.4.11.1
glib2-tools-64bit-debuginfo - addressed in versions 2.70.5-150400.3.20.1, 2.78.6-150600.4.11.1
glib2-devel-64bit - addressed in versions 2.70.5-150400.3.20.1, 2.78.6-150600.4.11.1
libgobject-2_0-0-64bit - addressed in versions 2.70.5-150400.3.20.1, 2.78.6-150600.4.11.1
libgmodule-2_0-0-64bit - addressed in versions 2.70.5-150400.3.20.1, 2.78.6-150600.4.11.1
libgthread-2_0-0-64bit-debuginfo - addressed in versions 2.70.5-150400.3.20.1, 2.78.6-150600.4.11.1
libglib-2_0-0-64bit - addressed in versions 2.70.5-150400.3.20.1, 2.78.6-150600.4.11.1
libgio-2_0-0-64bit - addressed in versions 2.70.5-150400.3.20.1, 2.78.6-150600.4.11.1
libgmodule-2_0-0-64bit-debuginfo - addressed in versions 2.70.5-150400.3.20.1, 2.78.6-150600.4.11.1
libgmodule-2_0-0-32bit - addressed in versions 2.70.5-150400.3.20.1, 2.78.6-150600.4.11.1
libgthread-2_0-0-32bit-debuginfo - addressed in versions 2.70.5-150400.3.20.1, 2.78.6-150600.4.11.1
libgmodule-2_0-0-32bit-debuginfo - addressed in versions 2.70.5-150400.3.20.1, 2.78.6-150600.4.11.1
glib2-tools-32bit - addressed in versions 2.70.5-150400.3.20.1, 2.78.6-150600.4.11.1
libglib-2_0-0-32bit - addressed in versions 2.70.5-150400.3.20.1, 2.78.6-150600.4.11.1
glib2-devel-32bit-debuginfo - addressed in versions 2.70.5-150400.3.20.1, 2.78.6-150600.4.11.1
glib2-tools-32bit-debuginfo - addressed in versions 2.70.5-150400.3.20.1, 2.78.6-150600.4.11.1
libgio-2_0-0-64bit-debuginfo - addressed in versions 2.70.5-150400.3.20.1, 2.78.6-150600.4.11.1
libgobject-2_0-0-32bit-debuginfo - addressed in versions 2.70.5-150400.3.20.1, 2.78.6-150600.4.11.1
glib2-devel-32bit - addressed in versions 2.70.5-150400.3.20.1, 2.78.6-150600.4.11.1
glib2-static - update to 2.72.2-21
glib2-help - update to 2.72.2-21
glib2-tests - update to 2.72.2-21
glib2-devel - update to 2.72.2-21
glib2-debugsource - update to 2.72.2-21
glib2-debuginfo - update to 2.72.2-21
glib2 - update to 2.72.2-21
Splunk Operator for Kubernetes Add-on - update to 3.0.0
APEX Cloud Platform for Red Hat OpenShift - update to 03.04.01.00
Cloud Pak for Data System - Cyclops - update to 11.3.1.1

• https://access.redhat.com/security/cve/CVE-2025-3360
• https://bugzilla.redhat.com/show_bug.cgi?id=2357754
• https://lists.debian.org/debian-lts-announce/2025/04/msg00024.html

• Integer overflow in Gnome GLib
• SUSE update for glib2
• openEuler update for glib2
• Dell APEX Cloud Platform for Red Hat OpenShift update for third-party components
• SUSE update for glib2
• Dell SmartFabric Manager update for third-party components
• Dell APEX Cloud Platform for Microsoft Azure update for third-party components
• Splunk Operator for Kubernetes Add-on update for third-party components
• Ubuntu update for glib2.0
• Ubuntu update for glib2.0
• Multiple vulnerabilities in IBM Cloud Pak for Data System - Cyclops