9.8

CVE-2024-52533: debian debian_linux Classic Buffer Overflow

CVSS: 9.8v3.1CriticalModified
AliasesMGASA-2024-0386SUSE-SU-2024:3998-1SUSE-SU-2024:4051-1
Published 11-11-2024Last modified 15-10-2026
Open JSON

Vulnerability summary

CVE-2024-52533 is a critical (CVSS 9.8) Classic Buffer Overflow vulnerability in debian debian_linux. EPSS estimates a 1.51% chance of exploitation in the next 30 days, higher than 74% of scored vulnerabilities. 1 public exploit is recorded.

Overall risk
70/100
0100
High · default modelHow is this calculated?
CVSS score
9.8/10
010
Critical · v3.1 (CVE.org)
EPSS score
1.51%
0%100%
Low · +0.25 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits1reference

Advisory lineage

Upstream 0 · Downstream 10
RHSA-2025:10855RHSA-2025:11140RHSA-2025:11327RHSA-2025:11373RHSA-2025:11374RHSA-2025:12275

Timeline

  1. 11-11-2024
    PublishedVulnerability first disclosed.
  2. 15-10-2026
    Last modifiedVulnerability information updated.

Description

gio/gsocks4aproxy.c in GNOME GLib before 2.82.1 has an off-by-one error and resultant buffer overflow because SOCKS4_CONN_MSG_LEN is not sufficient for a trailing '\0' character.

CVSS metrics

5 scores · 5 sources · 1 version

EPSS trend

Probability

1.51%

Chance of exploitation in the next 30 days

Percentile

74%

Versus all other CVEs

30-day change

+0.25 pp

From 1.25% on 19-09-2026

19-09-202619-10-2026
EPSS score
1.51%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

1 found
  • referenceUnverified

    Exploit Reference (gitlab.gnome.org)

    Maturity: unknown

Weaknesses

CWE · root cause

Affected systems

Suse24 products
  • glib2&distro=SUSE Enterprise Storage 7.1< 2.62.6-150200.3.24.1
  • glib2&distro=SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS< 2.62.6-150200.3.24.1
  • glib2&distro=SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS< 2.62.6-150200.3.24.1
  • glib2&distro=SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS< 2.70.5-150400.3.17.1
  • glib2&distro=SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS< 2.70.5-150400.3.17.1
Redhat7 products
  • mingw-glib2< 0:2.78.6-2.el9
  • mingw32-glib2< 0:2.78.6-2.el9
  • mingw32-glib2-debuginfo< 0:2.78.6-2.el9
  • mingw32-glib2-static< 0:2.78.6-2.el9
  • mingw64-glib2< 0:2.78.6-2.el9
Opensuse6 products
  • glib2-doc&distro=openSUSE Leap 15.5< 2.70.5-150400.3.17.1
  • glib2-doc&distro=openSUSE Leap 15.6< 2.78.6-150600.4.8.1
  • glib2&distro=openSUSE Leap 15.5< 2.70.5-150400.3.17.1
  • glib2&distro=openSUSE Leap 15.6< 2.78.6-150600.4.8.1
  • glib2&distro=openSUSE Leap Micro 5.5< 2.70.5-150400.3.17.1
Debian2 products
  • glib2.0< 2.66.8-1+deb11u5 | < 2.74.6-2+deb12u5 | < 2.82.1-1
  • debian_linuxEOL11.0
Netapp2 products
Gnome1 product
Mageia1 product
  • glib2.0< 2.76.3-1.3.mga9
Ubuntu1 product
  • glib2.0All versions (No fix recorded) | < 2.48.2-0ubuntu4.8+esm4 | < 2.56.4-0ubuntu0.18.04.9+esm4 | < 2.64.6-1~ubuntu20.04.8 | < 2.72.4-0ubuntu2.4 | < 2.80.0-6ubuntu3.2

8 vendors · 44 products

References

33 links
Show all 33 references