5.2

CVE-2024-34397: debian debian_linux Authentication Bypass by Spoofing

CVSS: 5.2v3.1MediumModified
AliasesALPINE-CVE-2024-34397MGASA-2024-0311SUSE-SU-2024:1830-1
Published 07-05-2024Last modified 15-10-2026
Open JSON

Vulnerability summary

CVE-2024-34397 is a medium (CVSS 5.2) Authentication Bypass by Spoofing vulnerability in debian debian_linux. EPSS estimates a 0.76% chance of exploitation in the next 30 days, higher than 54.5% of scored vulnerabilities. 1 public exploit is recorded.

Overall risk
31/100
0100
Medium · default modelHow is this calculated?
CVSS score
5.2/10
010
Medium · v3.1 (CVE.org)
EPSS score
0.76%
0%100%
Low · +0.01 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits1reference

Advisory lineage

Upstream 0 · Downstream 5
RHSA-2025:11327RHSA-2025:14988RHSA-2025:14989RHSA-2025:14990RHSA-2025:14991

Timeline

  1. 07-05-2024
    PublishedVulnerability first disclosed.
  2. 15-10-2026
    Last modifiedVulnerability information updated.

Description

An issue was discovered in GNOME GLib before 2.78.5, and 2.79.x and 2.80.x before 2.80.1. When a GDBus-based client subscribes to signals from a trusted system service such as NetworkManager on a shared computer, other users of the same computer can send spoofed D-Bus signals that the GDBus-based client will wrongly interpret as having been sent by the trusted system service. This could lead to the GDBus-based client behaving incorrectly, with an application-dependent impact.

CVSS metrics

6 scores · 6 sources · 1 version

EPSS trend

Probability

0.76%

Chance of exploitation in the next 30 days

Percentile

55%

Versus all other CVEs

30-day change

+0.01 pp

From 0.76% on 19-09-2026

19-09-202619-10-2026
EPSS score
0.76%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

1 found
  • referenceUnverified

    Exploit Reference (gitlab.gnome.org)

    Maturity: unknown

Weaknesses

CWE · root cause

Affected systems

Redhat16 products
  • glib2< 0:2.68.4-14.el9_4.1 | < 0:2.68.4-7.el9_2
  • glib2-debuginfo< 0:2.68.4-14.el9_4.1 | < 0:2.68.4-7.el9_2
  • glib2-debugsource< 0:2.68.4-14.el9_4.1 | < 0:2.68.4-7.el9_2
  • glib2-devel< 0:2.68.4-14.el9_4.1 | < 0:2.68.4-7.el9_2
  • glib2-devel-debuginfo< 0:2.68.4-14.el9_4.1 | < 0:2.68.4-7.el9_2
Suse13 products
  • glib2-branding-SLE&distro=SUSE Linux Enterprise Module for Basesystem 15 SP6< 15-150600.35.2.1
  • glib2&distro=SUSE Linux Enterprise Micro 5.1< 2.62.6-150200.3.18.1 | < 2.62.6-150200.3.21.1
  • glib2&distro=SUSE Linux Enterprise Micro 5.2< 2.62.6-150200.3.18.1 | < 2.62.6-150200.3.21.1
  • glib2&distro=SUSE Linux Enterprise Micro 5.3< 2.70.5-150400.3.14.1 | < 2.70.5-150400.3.11.1
  • glib2&distro=SUSE Linux Enterprise Micro 5.4< 2.70.5-150400.3.14.1 | < 2.70.5-150400.3.11.1
Opensuse8 products
  • glib2-branding-SLE&distro=openSUSE Leap 15.6< 15-150600.35.2.1
  • glib2-doc&distro=openSUSE Leap 15.5< 2.70.5-150400.3.14.1 | < 2.70.5-150400.3.11.1
  • glib2-doc&distro=openSUSE Leap 15.6< 2.78.6-150600.4.3.1
  • glib2&distro=openSUSE Leap 15.5< 2.70.5-150400.3.14.1 | < 2.70.5-150400.3.11.1
  • glib2&distro=openSUSE Leap 15.6< 2.78.6-150600.4.3.1
Debian2 products
  • glib2.0< 2.80.0-10 | < 2.66.8-1+deb11u2 | < 2.74.6-2+deb12u1 | < 2.58.3-2+deb10u6
  • debian_linuxEOL10.0
Alpine1 product
  • glib≥ 2.79.0, < 2.78.5-r0 | ≥ 2.79.0, < 2.80.1-r0
Fedoraproject1 product
Gnome1 product
  • glib< 2.78.5 | ≥ 2.79.0, < 2.80.1
Mageia1 product
  • glib2.0< 2.76.3-1.2.mga9
Netapp1 product
Ubuntu1 product
  • glib2.0All versions (No fix recorded) | < 2.64.6-1~ubuntu20.04.7 | < 2.72.4-0ubuntu2.3 | < 2.80.0-6ubuntu3.1

10 vendors · 45 products

References

45 links
Show all 45 references