{"id":"CVE-2024-34397","title":"An issue was discovered in GNOME GLib before 2.78.5, and 2.79.x and 2.80.x before 2.80.1","summary":"An issue was discovered in GNOME GLib before 2.78.5, and 2.79.x and 2.80.x before 2.80.1. When a GDBus-based client subscribes to signals from a trusted system service such as NetworkManager on a shared computer, other users of the same …","severity":"medium","cvss":5.2,"cvssVector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L","cvssSource":"adp","ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2024-05-09T19:45:07.808061Z"},"published":"2024-05-07","updated":"2026-10-15","sourceUpdated":"2026-10-15T00:40:45.830Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2024-34397","references":[{"url":"https://gitlab.gnome.org/GNOME/glib/-/issues/3268"},{"url":"https://www.openwall.com/lists/oss-security/2024/05/07/5"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IRSFYAE5X23TNRWX7ZWEJOMISLCDSYNS/","label":"FEDORA-2024-be032e564d"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UNFJHISR4O6VFOHBFWH5I5WWMG37H63A/","label":"FEDORA-2024-2ce1c754f7"},{"url":"https://lists.debian.org/debian-lts-announce/2024/05/msg00008.html","label":"[debian-lts-announce] 20240513 [SECURITY] [DLA 3814-1] glib2.0 security update"},{"url":"https://security.netapp.com/advisory/ntap-20240531-0008/"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LL6HSJDXCXMLEIJBYV6CPOR4K2NTCTXW/","label":"FEDORA-2024-fd2569c4e9"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LCDY3KA7G7D3DRXYTT46K6LFHS2KHWBH/","label":"FEDORA-2024-635a54eb7e"}],"tags":["cve.org"],"epss":0.00763,"epssPercentile":0.55168,"ingestedAt":"2026-10-15T04:46:37.314Z","slug":"CVE-2024-34397","body":"## Overview\n\nAn issue was discovered in GNOME GLib before 2.78.5, and 2.79.x and 2.80.x before 2.80.1. When a GDBus-based client subscribes to signals from a trusted system service such as NetworkManager on a shared computer, other users of the same computer can send spoofed D-Bus signals that the GDBus-based client will wrongly interpret as having been sent by the trusted system service. This could lead to the GDBus-based client behaving incorrectly, with an application-dependent impact.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":29,"depthScoreParts":{"impact":28.6,"likelihood":0.2,"exploitation":0,"ransomware":0},"changes":[]}