#VU25564 Resource management error

Published: 2020-02-24

Vulnerability identifier: #VU25564

Vulnerability risk: Low

CVSSv3.1: 2.9 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:U/RL:O/RC:C]



Exploitation vector: Local

Exploit availability: No

Vulnerable software:
Gnome GLib
Universal components / Libraries / Libraries used by multiple products

Vendor: Gnome Development Team


The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to relative read when calling the g_printerr() function, which could lead to a denial of service from a setuid-root process being used to block access to the TTY for another user. A local user can block access to TTY for another user.

Install updates from vendor's website.

Vulnerable software versions

Gnome GLib: 2.60.0 - 2.63.5


External links

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

Latest bulletins with this vulnerability