CVE-2020-36774

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2020-36774
plugins/gtk+/glade-gtk-box.c in GNOME Glade before 3.38.1 and 3.39.x before 3.40.0 mishandles widget rebuilding for GladeGtkBox, leading to a denial of service (application crash).

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://gitlab.gnome.org/GNOME/glade/-/commit/7acdd3c6f6934f47b8974ebc2190a59ea5d2ed17 Patch
https://gitlab.gnome.org/GNOME/glade/-/issues/479 Issue Tracking
https://gitlab.gnome.org/GNOME/glade/-/commit/7acdd3c6f6934f47b8974ebc2190a59ea5d2ed17 Patch
https://gitlab.gnome.org/GNOME/glade/-/issues/479 Issue Tracking
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:gnome:glade:*:*:*:*:*:*:*:*
cpe:2.3:a:gnome:glade:*:*:*:*:*:*:*:*
History

07 May 2025, 12:26

Type Values Removed Values Added
First Time Gnome glade
Gnome
References () https://gitlab.gnome.org/GNOME/glade/-/commit/7acdd3c6f6934f47b8974ebc2190a59ea5d2ed17 - () https://gitlab.gnome.org/GNOME/glade/-/commit/7acdd3c6f6934f47b8974ebc2190a59ea5d2ed17 - Patch
References () https://gitlab.gnome.org/GNOME/glade/-/issues/479 - () https://gitlab.gnome.org/GNOME/glade/-/issues/479 - Issue Tracking
CPE cpe:2.3:a:gnome:glade:*:*:*:*:*:*:*:*

21 Nov 2024, 05:30

Type Values Removed Values Added
References () https://gitlab.gnome.org/GNOME/glade/-/commit/7acdd3c6f6934f47b8974ebc2190a59ea5d2ed17 - () https://gitlab.gnome.org/GNOME/glade/-/commit/7acdd3c6f6934f47b8974ebc2190a59ea5d2ed17 -
References () https://gitlab.gnome.org/GNOME/glade/-/issues/479 - () https://gitlab.gnome.org/GNOME/glade/-/issues/479 -

04 Sep 2024, 15:35

Type Values Removed Values Added
CWE CWE-664
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5

20 Feb 2024, 19:50

Type Values Removed Values Added
Summary
  • (es) plugins/gtk+/glade-gtk-box.c en GNOME Glade anterior a 3.38.1 y 3.39.x anterior a 3.40.0 maneja mal la reconstrucción de widgets para GladeGtkBox, lo que provoca una denegación de servicio (caída de la aplicación).

19 Feb 2024, 02:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-02-19 02:15

Updated : 2025-05-07 12:26

NVD link : CVE-2020-36774

Mitre link : CVE-2020-36774

CVE.ORG link : CVE-2020-36774

JSON object : View

Products Affected

gnome

  • glade
CWE
CWE-664

Improper Control of a Resource Through its Lifetime