Description
An issue was discovered in GNOME GLib before 2.78.5, and 2.79.x and 2.80.x before 2.80.1. When a GDBus-based client subscribes to signals from a trusted system service such as NetworkManager on a shared computer, other users of the same computer can send spoofed D-Bus signals that the GDBus-based client will wrongly interpret as having been sent by the trusted system service. This could lead to the GDBus-based client behaving incorrectly, with an application-dependent impact.
Published: 2024-05-07
Score: 5.2 Medium
EPSS: < 1% Very Low
KEV: No
AI Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Remediation

No solution or workaround provided in the CVE record.

Additional remediation guidance may be available on OpenCVE Cloud.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
Debian DLA Debian DLA DLA-3814-1 glib2.0 security update
Debian DSA Debian DSA DSA-5682-1 glib2.0 security update
Ubuntu USN Ubuntu USN USN-6768-1 GLib vulnerability
References
Link Providers
https://cert-portal.siemens.com/productcert/html/ssa-082556.html cve-icon
https://cert-portal.siemens.com/productcert/html/ssa-613116.html cve-icon
https://gitlab.gnome.org/GNOME/glib/-/issues/3268 cve-icon cve-icon cve-icon
https://lists.debian.org/debian-lts-announce/2024/05/msg00008.html cve-icon cve-icon
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IRSFYAE5X23TNRWX7ZWEJOMISLCDSYNS/ cve-icon cve-icon
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LCDY3KA7G7D3DRXYTT46K6LFHS2KHWBH/ cve-icon cve-icon
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LL6HSJDXCXMLEIJBYV6CPOR4K2NTCTXW/ cve-icon cve-icon
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UNFJHISR4O6VFOHBFWH5I5WWMG37H63A/ cve-icon cve-icon
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IRSFYAE5X23TNRWX7ZWEJOMISLCDSYNS/ cve-icon
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LCDY3KA7G7D3DRXYTT46K6LFHS2KHWBH/ cve-icon
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LL6HSJDXCXMLEIJBYV6CPOR4K2NTCTXW/ cve-icon
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UNFJHISR4O6VFOHBFWH5I5WWMG37H63A/ cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2024-34397 cve-icon
https://security.netapp.com/advisory/ntap-20240531-0008/ cve-icon cve-icon
https://www.cve.org/CVERecord?id=CVE-2024-34397 cve-icon
https://www.openwall.com/lists/oss-security/2024/05/07/5 cve-icon cve-icon cve-icon
History

Tue, 12 May 2026 14:30:00 +0200

Type Values Removed Values Added
References

Tue, 04 Nov 2025 23:30:00 +0100

Type Values Removed Values Added
References

Tue, 04 Nov 2025 19:30:00 +0100

Type Values Removed Values Added
References

Wed, 18 Jun 2025 17:00:00 +0200

Type Values Removed Values Added
First Time appeared Debian
Debian debian Linux
Fedoraproject
Fedoraproject fedora
Gnome
Gnome glib
Netapp
Netapp ontap Tools
CPEs cpe:2.3:a:gnome:glib:*:*:*:*:*:*:*:*
cpe:2.3:a:netapp:ontap_tools:10:*:*:*:*:vmware_vsphere:*:*
cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:*
cpe:2.3:o:fedoraproject:fedora:40:*:*:*:*:*:*:*
Vendors & Products Debian
Debian debian Linux
Fedoraproject
Fedoraproject fedora
Gnome
Gnome glib
Netapp
Netapp ontap Tools

Fri, 15 Nov 2024 19:15:00 +0100

Type Values Removed Values Added
Weaknesses CWE-290
Metrics cvssV3_1

{'score': 3.8, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N'}

 ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

cvssV3_1

{'score': 5.2, 'vector': 'CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L'}

Wed, 13 Nov 2024 03:45:00 +0100

Type Values Removed Values Added
CPEs cpe:/a:redhat:enterprise_linux:9::crb

Tue, 01 Oct 2024 04:30:00 +0200

Type Values Removed Values Added
CPEs cpe:/a:redhat:service_interconnect:1::el9

Fri, 27 Sep 2024 01:00:00 +0200

Type Values Removed Values Added
First Time appeared Redhat service Interconnect
CPEs cpe:/a:redhat:service_interconnect:1.4::el9
Vendors & Products Redhat service Interconnect

Mon, 09 Sep 2024 12:45:00 +0200

Type Values Removed Values Added
First Time appeared Redhat
Redhat enterprise Linux
CPEs cpe:/a:redhat:enterprise_linux:9
cpe:/o:redhat:enterprise_linux:9
Vendors & Products Redhat
Redhat enterprise Linux

Subscriptions

Debian Debian Linux
Fedoraproject Fedora
Gnome Glib
Netapp Ontap Tools
Redhat Enterprise Linux Service Interconnect
cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published:

Updated: 2026-10-15T00:40:45.830Z

Reserved: 2024-05-02T00:00:00.000Z

Link: CVE-2024-34397

cve-icon Vulnrichment

Updated: 2025-11-04T22:06:15.286Z

cve-icon NVD

Status : Modified

Published: 2024-05-07T18:15:08.350

Modified: 2026-06-17T07:33:18.683

Link: CVE-2024-34397

cve-icon Redhat

Severity : Moderate

Publid Date: 2024-05-07T00:00:00Z

Links: CVE-2024-34397 - Bugzilla

cve-icon OpenCVE Enrichment

No data.

Weaknesses
  • CWE-290

    Authentication Bypass by Spoofing

  • CWE-940

    Improper Verification of Source of a Communication Channel