CVE-2024-52533

Name of the Vulnerable Software and Affected Versions: GNOME GLib versions prior to 2.82.1

Description: The issue is related to an off-by-one error and resultant buffer overflow in the gio/gsocks4aproxy.c component of GNOME GLib. This occurs because SOCKS4 CONN MSG LEN is not sufficient for a trailing 0 character. The vulnerability is associated with uncontrolled copying of input data, which could allow a remote attacker to cause a denial of service. Despite being marked as critical, exploitation of this issue in real-world scenarios is considered highly unlikely.

Recommendations: For GNOME GLib versions prior to 2.82.1, update to version 2.82.1 or later to resolve the issue. As a temporary workaround, consider restricting access to the vulnerable gio/gsocks4aproxy.c component until a patch is applied. Avoid using the SOCKS4 CONN MSG LEN variable in affected API endpoints until the issue is resolved.