CVE-2008-4316: gnome glib Numeric Errors

EPSS trend

Probability

0.49%

Chance of exploitation in the next 30 days

Percentile

41%

Versus all other CVEs

30-day change

0.00 pp

From 0.49% on 19-09-2026

19-09-202619-10-2026

EPSS score

0.49%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

References

39 links

ocert.org/patches/2008-015/glib-CVE-2008-4316.diffX Refsource MISCPatch
www.securityfocus.com/archive/1/501766/100/0/threadedMailing ListX Refsource BUGTRAQ
www.ubuntu.com/usn/usn-738-1Vendor AdvisoryX Refsource UBUNTU
secunia.com/advisories/34560Third Party AdvisoryX Refsource SECUNIA
www.openwall.com/lists/oss-security/2009/03/16/2Mailing ListX Refsource MLIST
secunia.com/advisories/38794Third Party AdvisoryX Refsource SECUNIA
lists.vmware.com/pipermail/security-announce/2010/000082.htmlMailing ListX Refsource MLIST
www.mandriva.com/security/advisories?name=MDVSA-2009:080Vendor AdvisoryX Refsource MANDRIVA
wiki.rpath.com/Advisories:rPSA-2009-0045X Refsource CONFIRM
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11401VDB EntrySignatureX Refsource OVAL

Show all 39 references

www.redhat.com/archives/fedora-package-announce/2009-March/msg01113.htmlVendor AdvisoryX Refsource FEDORA
openwall.com/lists/oss-security/2009/03/12/2Mailing ListX Refsource MLISTPatch
www.securityfocus.com/bid/34100VDB EntryX Refsource BIDPatch
secunia.com/advisories/34854Third Party AdvisoryX Refsource SECUNIA
www.securityfocus.com/archive/1/501712/100/0/threadedMailing ListX Refsource BUGTRAQ
secunia.com/advisories/34267Third Party AdvisoryX Refsource SECUNIA
www.redhat.com/support/errata/RHSA-2009-0336.htmlVendor AdvisoryX Refsource REDHAT
secunia.com/advisories/38833Third Party AdvisoryX Refsource SECUNIA
www.securitytracker.com/id?1021884VDB EntryX Refsource SECTRACK
www.debian.org/security/2009/dsa-1747Vendor AdvisoryX Refsource DEBIAN
secunia.com/advisories/34317Third Party AdvisoryX Refsource SECUNIA
lists.opensuse.org/opensuse-security-announce/2009-04/msg00014.htmlVendor AdvisoryX Refsource SUSE
www.redhat.com/archives/fedora-package-announce/2009-April/msg00744.htmlVendor AdvisoryX Refsource FEDORA
secunia.com/advisories/34416Third Party AdvisoryX Refsource SECUNIA
svn.gnome.org/viewvc/glib?view=revision&revision=7973X Refsource CONFIRMPatchVendor Advisory
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8360VDB EntrySignatureX Refsource OVAL
secunia.com/advisories/34404Third Party AdvisoryX Refsource SECUNIA
exchange.xforce.ibmcloud.com/vulnerabilities/49272VDB EntryX Refsource XF
secunia.com/advisories/34890Third Party AdvisoryX Refsource SECUNIA
www.vupen.com/english/advisories/2010/0528VDB EntryX Refsource VUPEN
www.ocert.org/advisories/ocert-2008-015.htmlX Refsource MISC
access.redhat.com/errata/RHSA-2009:0336Advisory
www.redhat.com/security/updates/classification/ARTICLE
bugzilla.redhat.com/show_bug.cgi?id=474770REPORT
security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_0336.jsonAdvisory
access.redhat.com/security/cve/CVE-2008-4316REPORT
www.cve.org/CVERecord?id=CVE-2008-4316Advisory
nvd.nist.gov/vuln/detail/CVE-2008-4316Advisory
security-tracker.debian.org/tracker/CVE-2008-4316Advisory

Related vulnerabilities

CVE-2018-16429canonicalubuntu_linux+73.53%8y ago04-09-2018 00:00GNOME GLib 2.56.1 has an out-of-bounds read vulnerability in g_markup_parse_context_parse() in gmarkup.c, related to utf8_str().CVE-2018-16428canonicalubuntu_linux+34.69%8y ago04-09-2018 00:00In GNOME GLib 2.56.1, g_markup_parse_context_end_parse() in gmarkup.c has a NULL pointer dereference.CVE-2025-4056ubuntuglib2.0+10.48%1y ago28-07-2025 12:40A flaw was found in GLib. A denial of service on Windows platforms may occur if an application attempts to spawn a program using long command lines.CVE-2025-6052chainguardopenjdk-11-openj9+440.52%1y ago13-06-2025 15:40A flaw was found in how GLib’s GString manages memory when adding data to strings. If a string is already very large, combining it with more input can cause a hidden overflow in the size calculation. This makes the system think it has enough memory when it doesn’t. As a result, data may be written past the end of the allocated memory, leading to crashes or memory corruption.CVE-2020-6750alpineglib+52.20%6y ago09-01-2020 19:23GSocketClient in GNOME GLib through 2.62.4 may occasionally connect directly to a target address instead of connecting via a proxy server when configured to do so, because the proxy_addr field is mishandled. This bug is timing-dependent and may occur only sporadically depending on network delays. The greatest security relevance is in use cases where a proxy is used to help with privacy/anonymity, even though there is no technical barrier to a direct connection. NOTE: versions before 2.60 are unaffected.CVE-2020-35457debianglib2.0+10.57%5y ago14-12-2020 22:25GNOME GLib before 2.65.3 has an integer overflow, that might lead to an out-of-bounds write, in g_option_group_add_entries. NOTE: the vendor's position is "Realistically this is not a security issue. The standard pattern is for callers to provide a static list of option entries in a fixed number of calls to g_option_group_add_entries()." The researcher states that this pattern is undocumented

All vulnerabilities inglib

CVE-2008-4316: gnome glib Numeric Errors

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References