Every CVE Search/ Get API key

CVE-2019-13012

The keyfile settings backend in GNOME GLib (aka glib2.0) before 2.59.1 creates directories using...

7.5 HighFix available

The keyfile settings backend in GNOME GLib (aka glib2.0) before 2.60.0 creates directories using g_file_make_directory_with_parents (kfsb->dir, NULL, NULL) and files using g_file_replace_contents (kfsb->file, contents, length, NULL, FALSE, G_FILE_CREATE_REPLACE_DESTINATION, NULL, NULL, NULL). Consequently, it does not properly restrict directory (and file) permissions. Instead, for directories, 0777 permissions are used; for files, default file permissions are used. This is similar to CVE-2019-12450.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
High
Availability
None

Exploit likelihood

3.21%Up 0.9 points since Apr 14, 2021
90%50%10%1%

What each source reports

NVD Score used 7.5

The keyfile settings backend in GNOME GLib (aka glib2.0) before 2.60.0 creates directories using g_file_make_directory_with_parents (kfsb->dir, NULL, NULL) and files using g_file_replace_contents (kfsb->file, contents, length, NULL, FALSE, G_FILE_CREATE_REPLACE_DESTINATION, NULL, NULL, NULL). Consequently, it does not properly restrict directory (and file) permissions. Instead, for directories, 0777 permissions are used; for files, default file permissions are used. This is similar to CVE-2019-12450.

Record
CVE-2019-13012
CVSS 3.0
7.5 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
CVSS 2.0
5.0 MediumAV:N/AC:L/Au:N/C:N/I:P/A:N
Weakness
CWE-732
Updated
2026-11-02
CVE List No score

The keyfile settings backend in GNOME GLib (aka glib2.0) before 2.60.0 creates directories using g_file_make_directory_with_parents (kfsb->dir, NULL, NULL) and files using g_file_replace_contents (kfsb->file, contents, length, NULL, FALSE, G_FILE_CREATE_REPLACE_DESTINATION, NULL, NULL, NULL). Consequently, it does not properly restrict directory (and file) permissions. Instead, for directories, 0777 permissions are used; for files, default file permissions are used. This is similar to CVE-2019-12450.

Record
CVE-2019-13012
Updated
2026-11-02
EUVDEUVD-2019-4585 No score

The keyfile settings backend in GNOME GLib (aka glib2.0) before 2.60.0 creates directories using g_file_make_directory_with_parents (kfsb->dir, NULL, NULL) and files using g_file_replace_contents (kfsb->file, contents, length, NULL, FALSE, G_FILE_CREATE_REPLACE_DESTINATION, NULL, NULL, NULL). Consequently, it does not properly restrict directory (and file) permissions. Instead, for directories, 0777 permissions are used; for files, default file permissions are used. This is similar to CVE-2019-12450.

Record
EUVD-2019-4585
Updated
2026-11-03
GitHub AdvisoriesGHSA-4cmr-h54h-4w78 7.5

The keyfile settings backend in GNOME GLib (aka glib2.0) before 2.59.1 creates directories using...

The keyfile settings backend in GNOME GLib (aka glib2.0) before 2.59.1 creates directories using g_file_make_directory_with_parents (kfsb->dir, NULL, NULL) and files using g_file_replace_contents (kfsb->file, contents, length, NULL, FALSE, G_FILE_CREATE_REPLACE_DESTINATION, NULL, NULL, NULL). Consequently, it does not properly restrict directory (and file) permissions. Instead, for directories, 0777 permissions are used; for files, default file permissions are used. This is similar to CVE-2019-12450.

Record
GHSA-4cmr-h54h-4w78
CVSS 3.0
7.5 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Weakness
CWE-732
Updated
2026-11-02
OSVBELL-CVE-2019-13012 7.5

CVE-2019-13012 does not affect BellSoft software

Record
BELL-CVE-2019-13012
CVSS 3.0
7.5 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Updated
2026-11-02
OSV 7.5

The keyfile settings backend in GNOME GLib (aka glib2.0) before 2.60.0 creates directories using g_file_make_directory_with_parents (kfsb->dir, NULL, NULL) and files using g_file_replace_contents (kfsb->file, contents, length, NULL, FALSE, G_FILE_CREATE_REPLACE_DESTINATION, NULL, NULL, NULL). Consequently, it does not properly restrict directory (and file) permissions. Instead, for directories, 0777 permissions are used; for files, default file permissions are used. This is similar to CVE-2019-12450.

Record
CVE-2019-13012
CVSS 3.0
7.5 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Updated
2026-11-02
Show 15 moreShow less
OSVDEBIAN-CVE-2019-13012 7.5

The keyfile settings backend in GNOME GLib (aka glib2.0) before 2.60.0 creates directories using g_file_make_directory_with_parents (kfsb->dir, NULL, NULL) and files using g_file_replace_contents (kfsb->file, contents, length, NULL, FALSE, G_FILE_CREATE_REPLACE_DESTINATION, NULL, NULL, NULL). Consequently, it does not properly restrict directory (and file) permissions. Instead, for directories, 0777 permissions are used; for files, default file permissions are used. This is similar to CVE-2019-12450.

Record
DEBIAN-CVE-2019-13012
CVSS 3.0
7.5 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Updated
2026-11-02
OSVJLSEC-2025-154 7.5

The keyfile settings backend in GNOME GLib (aka glib2.0) before 2.60.0 creates directories using...

The keyfile settings backend in GNOME GLib (aka glib2.0) before 2.60.0 creates directories using g_file_make_directory_with_parents (kfsb->dir, NULL, NULL) and files using g_file_replace_contents (kfsb->file, contents, length, NULL, FALSE, G_FILE_CREATE_REPLACE_DESTINATION, NULL, NULL, NULL). Consequently, it does not properly restrict directory (and file) permissions. Instead, for directories, 0777 permissions are used; for files, default file permissions are used. This is similar to CVE-2019-12450.

Record
JLSEC-2025-154
CVSS 3.0
7.5 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
CVSS 2.0
5.0 MediumAV:N/AC:L/Au:N/C:N/I:P/A:N
Updated
2026-11-02
OSVRHSA-2021:1586 8.8

Red Hat Security Advisory: GNOME security, bug fix, and enhancement update

Record
RHSA-2021:1586
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2021:1586 8.8

Moderate: GNOME security, bug fix, and enhancement update

GNOME is the default desktop environment of Rocky Linux.

The following packages have been upgraded to a later upstream version: accountsservice (0.6.55), webkit2gtk3 (2.30.4). (BZ#1846376, BZ#1883304)

Security Fix(es):

  • webkitgtk: type confusion may lead to arbitrary code execution (CVE-2020-9948)

  • webkitgtk: use-after-free may lead to arbitrary code execution (CVE-2020-9951)

  • webkitgtk: out-of-bounds write may lead to code execution (CVE-2020-9983)

  • webkitgtk: use-after-free may lead to arbitrary code execution (CVE-2020-13543)

  • webkitgtk: use-after-free may lead to arbitrary code execution (CVE-2020-13584)

  • glib2: insecure permissions for files and directories (CVE-2019-13012)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 8.4 Release Notes linked from the References section.

Record
RLSA-2021:1586
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2019-13012 7.5

The keyfile settings backend in GNOME GLib (aka glib2.0) before 2.60.0 creates directories using g_file_make_directory_with_parents (kfsb->dir, NULL, NULL) and files using g_file_replace_contents (kfsb->file, contents, length, NULL, FALSE, G_FILE_CREATE_REPLACE_DESTINATION, NULL, NULL, NULL). Consequently, it does not properly restrict directory (and file) permissions. Instead, for directories, 0777 permissions are used; for files, default file permissions are used. This is similar to CVE-2019-12450.

Record
UBUNTU-CVE-2019-13012
CVSS 3.0
7.5 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Updated
2026-11-02
OSVALSA-2021:1586 No score

Moderate: GNOME security, bug fix, and enhancement update

GNOME is the default desktop environment of AlmaLinux.

The following packages have been upgraded to a later upstream version: accountsservice (0.6.55), webkit2gtk3 (2.30.4). (BZ#1846376, BZ#1883304)

Security Fix(es):

  • webkitgtk: type confusion may lead to arbitrary code execution (CVE-2020-9948)

  • webkitgtk: use-after-free may lead to arbitrary code execution (CVE-2020-9951)

  • webkitgtk: out-of-bounds write may lead to code execution (CVE-2020-9983)

  • webkitgtk: use-after-free may lead to arbitrary code execution (CVE-2020-13543)

  • webkitgtk: use-after-free may lead to arbitrary code execution (CVE-2020-13584)

  • glib2: insecure permissions for files and directories (CVE-2019-13012)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

Record
ALSA-2021:1586
Updated
2026-11-02
OSVCLSA-2026-1776346717 No score

glib2: Fix of 2 CVEs

  • CVE-2019-12450: fix insecure file permissions during copy operations
  • CVE-2019-13012: fix insecure directory and file permissions in keyfile settings backend
Record
CLSA-2026-1776346717
Updated
2026-11-02
OSVCLSA-2026-1776347560 No score

glib2: Fix of 2 CVEs

  • CVE-2019-12450: fix insecure file permissions during copy operations
  • CVE-2019-13012: fix insecure directory and file permissions in keyfile settings backend
Record
CLSA-2026-1776347560
Updated
2026-11-02
OSVopenSUSE-SU-2019:1749-1 No score

Security update for glib2

This update for glib2 fixes the following issues:

Security issue fixed:

  • CVE-2019-13012: Fixed improper restriction of file permissions when creating directories (bsc#1139959).

This update was imported from the SUSE:SLE-15:Update update project.

Record
openSUSE-SU-2019:1749-1
Updated
2026-11-02
OSVSUSE-SU-2019:1824-1 No score

Security update for glib2

This update for glib2 fixes the following issues:

Security issue fixed:

  • CVE-2019-13012: Fixed improper restriction of file permissions when creating directories (bsc#1139959).
Record
SUSE-SU-2019:1824-1
Updated
2026-11-02
OSVSUSE-SU-2019:1830-1 No score

Security update for glib2

This update for glib2 fixes the following issues:

Security issue fixed:

  • CVE-2019-13012: Fixed improper restriction of file permissions when creating directories (bsc#1139959).

Non-security issue fixed:

  • Added explicit requires between libglib2 and libgio2 (bsc#1140122).
Record
SUSE-SU-2019:1830-1
Updated
2026-11-02
OSVSUSE-SU-2019:1830-2 No score

Security update for glib2

This update for glib2 fixes the following issues:

Security issue fixed:

  • CVE-2019-13012: Fixed improper restriction of file permissions when creating directories (bsc#1139959).

Non-security issue fixed:

  • Added explicit requires between libglib2 and libgio2 (bsc#1140122).
Record
SUSE-SU-2019:1830-2
Updated
2026-11-02
OSVSUSE-SU-2019:1833-1 No score

Security update for glib2

This update for glib2 fixes the following issues:

Security issue fixed:

  • CVE-2019-13012: Fixed improper restriction of file permissions when creating directories (bsc#1139959).
Record
SUSE-SU-2019:1833-1
Updated
2026-11-02
OSVUSN-4049-1 No score

glib2.0 vulnerability

It was discovered that GLib created directories and files without properly restricting permissions. An attacker could possibly use this issue to access sensitive information.

Record
USN-4049-1
Updated
2026-11-02
OSVUSN-4049-2 No score

glib2.0 vulnerability

USN-4049-1 fixed a vulnerability in GLib. This update provides the corresponding update for Ubuntu 12.04 ESM and Ubuntu 14.04 ESM.

Original advisory details:

It was discovered that GLib created directories and files without properly restricting permissions. An attacker could possibly use this issue to access sensitive information.

Record
USN-4049-2
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
OpenEXR-devel
AlmaLinux:8
From an advisory covering 12 CVEs
 before 2.2.0-12.el8
2.2.0-12.el8
OpenEXR-libs
AlmaLinux:8
From an advisory covering 12 CVEs
 before 2.2.0-12.el8
2.2.0-12.el8
accountsservice-devel
AlmaLinux:8
From an advisory covering 12 CVEs
 before 0.6.55-1.el8
0.6.55-1.el8
atkmm
AlmaLinux:8
From an advisory covering 12 CVEs
 before 2.24.2-7.el8
2.24.2-7.el8
atkmm-devel
AlmaLinux:8
From an advisory covering 12 CVEs
 before 2.24.2-7.el8
2.24.2-7.el8
atkmm-doc
AlmaLinux:8
From an advisory covering 12 CVEs
 before 2.24.2-7.el8
2.24.2-7.el8
cairomm
AlmaLinux:8
From an advisory covering 12 CVEs
 before 1.12.0-8.el8
1.12.0-8.el8
cairomm-devel
AlmaLinux:8
From an advisory covering 12 CVEs
 before 1.12.0-8.el8
1.12.0-8.el8
cairomm-doc
AlmaLinux:8
From an advisory covering 12 CVEs
 before 1.12.0-8.el8
1.12.0-8.el8
chrome-gnome-shell
AlmaLinux:8
From an advisory covering 12 CVEs
 before 10.1-7.el8
10.1-7.el8
Show 182 moreShow less
Affected packages
PackageAffectedFixed
dleyna-core
AlmaLinux:8
From an advisory covering 12 CVEs
 before 0.6.0-3.el8
0.6.0-3.el8
dleyna-server
AlmaLinux:8
From an advisory covering 12 CVEs
 before 0.6.0-3.el8
0.6.0-3.el8
enchant2
AlmaLinux:8
From an advisory covering 12 CVEs
 before 2.2.3-3.el8
2.2.3-3.el8
enchant2-devel
AlmaLinux:8
From an advisory covering 12 CVEs
 before 2.2.3-3.el8
2.2.3-3.el8
gamin
AlmaLinux:8
From an advisory covering 12 CVEs
 before 0.1.10-32.el8
0.1.10-32.el8
gamin-devel
AlmaLinux:8
From an advisory covering 12 CVEs
 before 0.1.10-32.el8
0.1.10-32.el8
geoclue2
AlmaLinux:8
From an advisory covering 12 CVEs
 before 2.5.5-2.el8
2.5.5-2.el8
geoclue2-demos
AlmaLinux:8
From an advisory covering 12 CVEs
 before 2.5.5-2.el8
2.5.5-2.el8
geoclue2-devel
AlmaLinux:8
From an advisory covering 12 CVEs
 before 2.5.5-2.el8
2.5.5-2.el8
geoclue2-libs
AlmaLinux:8
From an advisory covering 12 CVEs
 before 2.5.5-2.el8
2.5.5-2.el8
geocode-glib
AlmaLinux:8
From an advisory covering 12 CVEs
 before 3.26.0-3.el8
3.26.0-3.el8
geocode-glib-devel
AlmaLinux:8
From an advisory covering 12 CVEs
 before 3.26.0-3.el8
3.26.0-3.el8
gjs
AlmaLinux:8
From an advisory covering 12 CVEs
 before 1.56.2-5.el8
1.56.2-5.el8
gjs-devel
AlmaLinux:8
From an advisory covering 12 CVEs
 before 1.56.2-5.el8
1.56.2-5.el8
glib2-doc
AlmaLinux:8
From an advisory covering 12 CVEs
 before 2.56.4-9.el8
2.56.4-9.el8
glib2-static
AlmaLinux:8
From an advisory covering 12 CVEs
 before 2.56.4-9.el8
2.56.4-9.el8
glibmm24
AlmaLinux:8
From an advisory covering 12 CVEs
 before 2.56.0-2.el8
2.56.0-2.el8
glibmm24-devel
AlmaLinux:8
From an advisory covering 12 CVEs
 before 2.56.0-2.el8
2.56.0-2.el8
glibmm24-doc
AlmaLinux:8
From an advisory covering 12 CVEs
 before 2.56.0-2.el8
2.56.0-2.el8
gnome-boxes
AlmaLinux:8
From an advisory covering 12 CVEs
 before 3.36.5-8.el8
3.36.5-8.el8
gnome-photos
AlmaLinux:8
From an advisory covering 12 CVEs
 before 3.28.1-4.el8
3.28.1-4.el8
gnome-photos-tests
AlmaLinux:8
From an advisory covering 12 CVEs
 before 3.28.1-4.el8
3.28.1-4.el8
gnome-terminal
AlmaLinux:8
From an advisory covering 12 CVEs
 before 3.28.3-3.el8
3.28.3-3.el8
gnome-terminal-nautilus
AlmaLinux:8
From an advisory covering 12 CVEs
 before 3.28.3-3.el8
3.28.3-3.el8
gtk-doc
AlmaLinux:8
From an advisory covering 12 CVEs
 before 1.28-3.el8
1.28-3.el8
gtk2
AlmaLinux:8
From an advisory covering 12 CVEs
 before 2.24.32-5.el8
2.24.32-5.el8
gtk2-devel
AlmaLinux:8
From an advisory covering 12 CVEs
 before 2.24.32-5.el8
2.24.32-5.el8
gtk2-devel-docs
AlmaLinux:8
From an advisory covering 12 CVEs
 before 2.24.32-5.el8
2.24.32-5.el8
gtk2-immodule-xim
AlmaLinux:8
From an advisory covering 12 CVEs
 before 2.24.32-5.el8
2.24.32-5.el8
gtk2-immodules
AlmaLinux:8
From an advisory covering 12 CVEs
 before 2.24.32-5.el8
2.24.32-5.el8
gtkmm24
AlmaLinux:8
From an advisory covering 12 CVEs
 before 2.24.5-6.el8
2.24.5-6.el8
gtkmm24-devel
AlmaLinux:8
From an advisory covering 12 CVEs
 before 2.24.5-6.el8
2.24.5-6.el8
gtkmm24-docs
AlmaLinux:8
From an advisory covering 12 CVEs
 before 2.24.5-6.el8
2.24.5-6.el8
gtkmm30
AlmaLinux:8
From an advisory covering 12 CVEs
 before 3.22.2-3.el8
3.22.2-3.el8
gtkmm30-devel
AlmaLinux:8
From an advisory covering 12 CVEs
 before 3.22.2-3.el8
3.22.2-3.el8
gtkmm30-doc
AlmaLinux:8
From an advisory covering 12 CVEs
 before 3.22.2-3.el8
3.22.2-3.el8
gvfs
AlmaLinux:8
From an advisory covering 12 CVEs
 before 1.36.2-11.el8
1.36.2-11.el8
gvfs-afc
AlmaLinux:8
From an advisory covering 12 CVEs
 before 1.36.2-11.el8
1.36.2-11.el8
gvfs-afp
AlmaLinux:8
From an advisory covering 12 CVEs
 before 1.36.2-11.el8
1.36.2-11.el8
gvfs-archive
AlmaLinux:8
From an advisory covering 12 CVEs
 before 1.36.2-11.el8
1.36.2-11.el8
gvfs-client
AlmaLinux:8
From an advisory covering 12 CVEs
 before 1.36.2-11.el8
1.36.2-11.el8
gvfs-devel
AlmaLinux:8
From an advisory covering 12 CVEs
 before 1.36.2-11.el8
1.36.2-11.el8
gvfs-fuse
AlmaLinux:8
From an advisory covering 12 CVEs
 before 1.36.2-11.el8
1.36.2-11.el8
gvfs-goa
AlmaLinux:8
From an advisory covering 12 CVEs
 before 1.36.2-11.el8
1.36.2-11.el8
gvfs-gphoto2
AlmaLinux:8
From an advisory covering 12 CVEs
 before 1.36.2-11.el8
1.36.2-11.el8
gvfs-mtp
AlmaLinux:8
From an advisory covering 12 CVEs
 before 1.36.2-11.el8
1.36.2-11.el8
gvfs-smb
AlmaLinux:8
From an advisory covering 12 CVEs
 before 1.36.2-11.el8
1.36.2-11.el8
libdazzle
AlmaLinux:8
From an advisory covering 12 CVEs
 before 3.28.5-2.el8
3.28.5-2.el8
libdazzle-devel
AlmaLinux:8
From an advisory covering 12 CVEs
 before 3.28.5-2.el8
3.28.5-2.el8
libepubgen
AlmaLinux:8
From an advisory covering 12 CVEs
 before 0.1.0-3.el8
0.1.0-3.el8
libepubgen-devel
AlmaLinux:8
From an advisory covering 12 CVEs
 before 0.1.0-3.el8
0.1.0-3.el8
libsass
AlmaLinux:8
From an advisory covering 12 CVEs
 before 3.4.5-6.el8
3.4.5-6.el8
libsass-devel
AlmaLinux:8
From an advisory covering 12 CVEs
 before 3.4.5-6.el8
3.4.5-6.el8
libsigc++20
AlmaLinux:8
From an advisory covering 12 CVEs
 before 2.10.0-6.el8
2.10.0-6.el8
libsigc++20-devel
AlmaLinux:8
From an advisory covering 12 CVEs
 before 2.10.0-6.el8
2.10.0-6.el8
libsigc++20-doc
AlmaLinux:8
From an advisory covering 12 CVEs
 before 2.10.0-6.el8
2.10.0-6.el8
libvisual
AlmaLinux:8
From an advisory covering 12 CVEs
 before 1:0.4.0-25.el8
1:0.4.0-25.el8
libvisual-devel
AlmaLinux:8
From an advisory covering 12 CVEs
 before 1:0.4.0-25.el8
1:0.4.0-25.el8
mutter-devel
AlmaLinux:8
From an advisory covering 12 CVEs
 before 3.32.2-57.el8
3.32.2-57.el8
nautilus
AlmaLinux:8
From an advisory covering 12 CVEs
 before 3.28.1-15.el8
3.28.1-15.el8
nautilus-devel
AlmaLinux:8
From an advisory covering 12 CVEs
 before 3.28.1-15.el8
3.28.1-15.el8
nautilus-extensions
AlmaLinux:8
From an advisory covering 12 CVEs
 before 3.28.1-15.el8
3.28.1-15.el8
pangomm
AlmaLinux:8
From an advisory covering 12 CVEs
 before 2.40.1-6.el8
2.40.1-6.el8
pangomm-devel
AlmaLinux:8
From an advisory covering 12 CVEs
 before 2.40.1-6.el8
2.40.1-6.el8
pangomm-doc
AlmaLinux:8
From an advisory covering 12 CVEs
 before 2.40.1-6.el8
2.40.1-6.el8
soundtouch
AlmaLinux:8
From an advisory covering 12 CVEs
 before 2.0.0-3.el8
2.0.0-3.el8
soundtouch-devel
AlmaLinux:8
From an advisory covering 12 CVEs
 before 2.0.0-3.el8
2.0.0-3.el8
vala
AlmaLinux:8
From an advisory covering 12 CVEs
 before 0.40.19-2.el8
0.40.19-2.el8
vala-devel
AlmaLinux:8
From an advisory covering 12 CVEs
 before 0.40.19-2.el8
0.40.19-2.el8
woff2
AlmaLinux:8
From an advisory covering 12 CVEs
 before 1.0.2-5.el8
1.0.2-5.el8
woff2-devel
AlmaLinux:8
From an advisory covering 12 CVEs
 before 1.0.2-5.el8
1.0.2-5.el8
glib2
TuxCare:CentOS:6
From an advisory covering 2 CVEs
 before 2.28.8-12.el6.tuxcare.els7
2.28.8-12.el6.tuxcare.els7
glib2-devel
TuxCare:CentOS:6
From an advisory covering 2 CVEs
 before 2.28.8-12.el6.tuxcare.els7
2.28.8-12.el6.tuxcare.els7
glib2-doc
TuxCare:CentOS:6
From an advisory covering 2 CVEs
 before 2.28.8-12.el6.tuxcare.els7
2.28.8-12.el6.tuxcare.els7
glib2-static
TuxCare:CentOS:6
From an advisory covering 2 CVEs
 before 2.28.8-12.el6.tuxcare.els7
2.28.8-12.el6.tuxcare.els7
glib2
TuxCare:OracleLinux:6
From an advisory covering 2 CVEs
 before 2.28.8-12.el6.tuxcare.els7
2.28.8-12.el6.tuxcare.els7
glib2-devel
TuxCare:OracleLinux:6
From an advisory covering 2 CVEs
 before 2.28.8-12.el6.tuxcare.els7
2.28.8-12.el6.tuxcare.els7
glib2-doc
TuxCare:OracleLinux:6
From an advisory covering 2 CVEs
 before 2.28.8-12.el6.tuxcare.els7
2.28.8-12.el6.tuxcare.els7
glib2-static
TuxCare:OracleLinux:6
From an advisory covering 2 CVEs
 before 2.28.8-12.el6.tuxcare.els7
2.28.8-12.el6.tuxcare.els7
glib2.0
Debian:12
 before 2.60.5-1
2.60.5-1
glib2.0
Debian:13
 before 2.60.5-1
2.60.5-1
glib2.0
Debian:14
 before 2.60.5-1
2.60.5-1
glib2.0
Debian:8
From an advisory covering 3 CVEs
 before 2.42.1-1+deb8u2, plus listed versions
2.42.1-12.42.1-1+deb8u1
2.42.1-1+deb8u2
glib2.0
Debian:8
 before 2.42.1-1+deb8u3, plus listed versions
2.42.1-12.42.1-1+deb8u12.42.1-1+deb8u2
2.42.1-1+deb8u3
Glib_jll
Julia
 before 2.68.1+0
2.68.1+0
glib2
Red Hat:enterprise_linux:8::baseos
From an advisory covering 12 CVEs
 before 0:2.56.4-9.el8
0:2.56.4-9.el8
glib2-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 12 CVEs
 before 0:2.56.4-9.el8
0:2.56.4-9.el8
glib2-debugsource
Red Hat:enterprise_linux:8::baseos
From an advisory covering 12 CVEs
 before 0:2.56.4-9.el8
0:2.56.4-9.el8
glib2-devel
Red Hat:enterprise_linux:8::baseos
From an advisory covering 12 CVEs
 before 0:2.56.4-9.el8
0:2.56.4-9.el8
glib2-devel-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 12 CVEs
 before 0:2.56.4-9.el8
0:2.56.4-9.el8
glib2-fam
Red Hat:enterprise_linux:8::baseos
From an advisory covering 12 CVEs
 before 0:2.56.4-9.el8
0:2.56.4-9.el8
glib2-fam-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 12 CVEs
 before 0:2.56.4-9.el8
0:2.56.4-9.el8
glib2-tests
Red Hat:enterprise_linux:8::baseos
From an advisory covering 12 CVEs
 before 0:2.56.4-9.el8
0:2.56.4-9.el8
glib2-tests-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 12 CVEs
 before 0:2.56.4-9.el8
0:2.56.4-9.el8
glib2-debuginfo
Red Hat:enterprise_linux:8::crb
From an advisory covering 12 CVEs
 before 0:2.56.4-9.el8
0:2.56.4-9.el8
glib2-debugsource
Red Hat:enterprise_linux:8::crb
From an advisory covering 12 CVEs
 before 0:2.56.4-9.el8
0:2.56.4-9.el8
glib2-devel-debuginfo
Red Hat:enterprise_linux:8::crb
From an advisory covering 12 CVEs
 before 0:2.56.4-9.el8
0:2.56.4-9.el8
glib2-doc
Red Hat:enterprise_linux:8::crb
From an advisory covering 12 CVEs
 before 0:2.56.4-9.el8
0:2.56.4-9.el8
glib2-fam-debuginfo
Red Hat:enterprise_linux:8::crb
From an advisory covering 12 CVEs
 before 0:2.56.4-9.el8
0:2.56.4-9.el8
glib2-static
Red Hat:enterprise_linux:8::crb
From an advisory covering 12 CVEs
 before 0:2.56.4-9.el8
0:2.56.4-9.el8
glib2-tests-debuginfo
Red Hat:enterprise_linux:8::crb
From an advisory covering 12 CVEs
 before 0:2.56.4-9.el8
0:2.56.4-9.el8
webkit2gtk3
Red Hat:enterprise_linux:8::appstream
From an advisory covering 12 CVEs
 before 0:2.30.4-1.el8
0:2.30.4-1.el8
webkit2gtk3-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 12 CVEs
 before 0:2.30.4-1.el8
0:2.30.4-1.el8
webkit2gtk3-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 12 CVEs
 before 0:2.30.4-1.el8
0:2.30.4-1.el8
webkit2gtk3-devel
Red Hat:enterprise_linux:8::appstream
From an advisory covering 12 CVEs
 before 0:2.30.4-1.el8
0:2.30.4-1.el8
webkit2gtk3-devel-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 12 CVEs
 before 0:2.30.4-1.el8
0:2.30.4-1.el8
webkit2gtk3-jsc
Red Hat:enterprise_linux:8::appstream
From an advisory covering 12 CVEs
 before 0:2.30.4-1.el8
0:2.30.4-1.el8
webkit2gtk3-jsc-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 12 CVEs
 before 0:2.30.4-1.el8
0:2.30.4-1.el8
webkit2gtk3-jsc-devel
Red Hat:enterprise_linux:8::appstream
From an advisory covering 12 CVEs
 before 0:2.30.4-1.el8
0:2.30.4-1.el8
webkit2gtk3-jsc-devel-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 12 CVEs
 before 0:2.30.4-1.el8
0:2.30.4-1.el8
gdm
Red Hat:enterprise_linux:8::appstream
From an advisory covering 12 CVEs
 before 1:3.28.3-39.el8
1:3.28.3-39.el8
gdm-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 12 CVEs
 before 1:3.28.3-39.el8
1:3.28.3-39.el8
gdm-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 12 CVEs
 before 1:3.28.3-39.el8
1:3.28.3-39.el8
cairomm
Rocky Linux:8
From an advisory covering 12 CVEs
 before 0:1.12.0-8.el8
0:1.12.0-8.el8
accountsservice
Rocky Linux:8
From an advisory covering 12 CVEs
 before 0:0.6.55-1.el8
0:0.6.55-1.el8
atkmm
Rocky Linux:8
From an advisory covering 12 CVEs
 before 0:2.24.2-7.el8
0:2.24.2-7.el8
chrome-gnome-shell
Rocky Linux:8
From an advisory covering 12 CVEs
 before 0:10.1-7.el8
0:10.1-7.el8
dleyna-core
Rocky Linux:8
From an advisory covering 12 CVEs
 before 0:0.6.0-3.el8
0:0.6.0-3.el8
dleyna-server
Rocky Linux:8
From an advisory covering 12 CVEs
 before 0:0.6.0-3.el8
0:0.6.0-3.el8
enchant2
Rocky Linux:8
From an advisory covering 12 CVEs
 before 0:2.2.3-3.el8
0:2.2.3-3.el8
gamin
Rocky Linux:8
From an advisory covering 12 CVEs
 before 0:0.1.10-32.el8
0:0.1.10-32.el8
gdm
Rocky Linux:8
From an advisory covering 12 CVEs
 before 1:3.28.3-39.el8
1:3.28.3-39.el8
geoclue2
Rocky Linux:8
From an advisory covering 12 CVEs
 before 0:2.5.5-2.el8
0:2.5.5-2.el8
geocode-glib
Rocky Linux:8
From an advisory covering 12 CVEs
 before 0:3.26.0-3.el8
0:3.26.0-3.el8
gjs
Rocky Linux:8
From an advisory covering 12 CVEs
 before 0:1.56.2-5.el8
0:1.56.2-5.el8
glibmm24
Rocky Linux:8
From an advisory covering 12 CVEs
 before 0:2.56.0-2.el8
0:2.56.0-2.el8
gnome-boxes
Rocky Linux:8
From an advisory covering 12 CVEs
 before 0:3.36.5-8.el8
0:3.36.5-8.el8
gnome-boxes
Rocky Linux:8
From an advisory covering 12 CVEs
 before 0:3.36.5-8.el8.rocky.0.1
0:3.36.5-8.el8.rocky.0.1
gnome-control-center
Rocky Linux:8
From an advisory covering 12 CVEs
 before 0:3.28.2-27.el8
0:3.28.2-27.el8
gnome-online-accounts
Rocky Linux:8
From an advisory covering 12 CVEs
 before 0:3.28.2-2.el8
0:3.28.2-2.el8
gnome-photos
Rocky Linux:8
From an advisory covering 12 CVEs
 before 0:3.28.1-4.el8
0:3.28.1-4.el8
gnome-settings-daemon
Rocky Linux:8
From an advisory covering 12 CVEs
 before 0:3.32.0-14.el8
0:3.32.0-14.el8
gnome-shell
Rocky Linux:8
From an advisory covering 12 CVEs
 before 0:3.32.2-30.el8
0:3.32.2-30.el8
gnome-software
Rocky Linux:8
From an advisory covering 12 CVEs
 before 0:3.36.1-5.el8
0:3.36.1-5.el8
gnome-terminal
Rocky Linux:8
From an advisory covering 12 CVEs
 before 0:3.28.3-3.el8
0:3.28.3-3.el8
gtk2
Rocky Linux:8
From an advisory covering 12 CVEs
 before 0:2.24.32-5.el8
0:2.24.32-5.el8
gtk-doc
Rocky Linux:8
From an advisory covering 12 CVEs
 before 0:1.28-3.el8
0:1.28-3.el8
gtkmm24
Rocky Linux:8
From an advisory covering 12 CVEs
 before 0:2.24.5-6.el8
0:2.24.5-6.el8
gtkmm30
Rocky Linux:8
From an advisory covering 12 CVEs
 before 0:3.22.2-3.el8
0:3.22.2-3.el8
gvfs
Rocky Linux:8
From an advisory covering 12 CVEs
 before 0:1.36.2-11.el8
0:1.36.2-11.el8
libdazzle
Rocky Linux:8
From an advisory covering 12 CVEs
 before 0:3.28.5-2.el8
0:3.28.5-2.el8
libepubgen
Rocky Linux:8
From an advisory covering 12 CVEs
 before 0:0.1.0-3.el8
0:0.1.0-3.el8
libsass
Rocky Linux:8
From an advisory covering 12 CVEs
 before 0:3.4.5-6.el8
0:3.4.5-6.el8
libsigc++20
Rocky Linux:8
From an advisory covering 12 CVEs
 before 0:2.10.0-6.el8
0:2.10.0-6.el8
libvisual
Rocky Linux:8
From an advisory covering 12 CVEs
 before 1:0.4.0-25.el8
1:0.4.0-25.el8
mutter
Rocky Linux:8
From an advisory covering 12 CVEs
 before 0:3.32.2-57.el8
0:3.32.2-57.el8
nautilus
Rocky Linux:8
From an advisory covering 12 CVEs
 before 0:3.28.1-15.el8
0:3.28.1-15.el8
OpenEXR
Rocky Linux:8
From an advisory covering 12 CVEs
 before 0:2.2.0-12.el8
0:2.2.0-12.el8
pangomm
Rocky Linux:8
From an advisory covering 12 CVEs
 before 0:2.40.1-6.el8
0:2.40.1-6.el8
soundtouch
Rocky Linux:8
From an advisory covering 12 CVEs
 before 0:2.0.0-3.el8
0:2.0.0-3.el8
vala
Rocky Linux:8
From an advisory covering 12 CVEs
 before 0:0.40.19-2.el8
0:0.40.19-2.el8
webkit2gtk3
Rocky Linux:8
From an advisory covering 12 CVEs
 before 0:2.30.4-1.el8
0:2.30.4-1.el8
woff2
Rocky Linux:8
From an advisory covering 12 CVEs
 before 0:1.0.2-5.el8
0:1.0.2-5.el8
glib2
SUSE:Linux Enterprise Server for SAP Applications 12 SP1
 before 2.38.2-7.12.1
2.38.2-7.12.1
glib2
SUSE:Linux Enterprise Server 12-LTSS
 before 2.38.2-7.12.1
2.38.2-7.12.1
glib2
SUSE:Linux Enterprise Server 12 SP1-LTSS
 before 2.38.2-7.12.1
2.38.2-7.12.1
glib2
SUSE:OpenStack Cloud 7
 before 2.48.2-12.15.1
2.48.2-12.15.1
glib2
SUSE:OpenStack Cloud 8
 before 2.48.2-12.15.1
2.48.2-12.15.1
glib2
SUSE:Linux Enterprise Desktop 12 SP4
 before 2.48.2-12.15.1
2.48.2-12.15.1
glib2
SUSE:Linux Enterprise Server for SAP Applications 12 SP2
 before 2.48.2-12.15.1
2.48.2-12.15.1
glib2
SUSE:Linux Enterprise Server for SAP Applications 12 SP3
 before 2.48.2-12.15.1
2.48.2-12.15.1
glib2
SUSE:Linux Enterprise Software Development Kit 12 SP4
 before 2.48.2-12.15.1
2.48.2-12.15.1
glib2
SUSE:Linux Enterprise Server 12 SP2-LTSS
 before 2.48.2-12.15.1
2.48.2-12.15.1
glib2
SUSE:Linux Enterprise Server 12 SP2-BCL
 before 2.48.2-12.15.1
2.48.2-12.15.1
glib2
SUSE:Linux Enterprise Server 12 SP3-LTSS
 before 2.48.2-12.15.1
2.48.2-12.15.1
glib2
SUSE:Linux Enterprise Server 12 SP4
 before 2.48.2-12.15.1
2.48.2-12.15.1
glib2
SUSE:Linux Enterprise Server for SAP Applications 12 SP4
 before 2.48.2-12.15.1
2.48.2-12.15.1
glib2
SUSE:Linux Enterprise Workstation Extension 12 SP4
 before 2.48.2-12.15.1
2.48.2-12.15.1
glib2
SUSE:Enterprise Storage 4
 before 2.48.2-12.15.1
2.48.2-12.15.1
glib2
SUSE:Enterprise Storage 5
 before 2.48.2-12.15.1
2.48.2-12.15.1
glib2
SUSE:HPE Helion OpenStack 8
 before 2.48.2-12.15.1
2.48.2-12.15.1
glib2
SUSE:OpenStack Cloud Crowbar 8
 before 2.48.2-12.15.1
2.48.2-12.15.1
glib2
SUSE:Linux Enterprise Server 12 SP3-BCL
 before 2.48.2-12.15.1
2.48.2-12.15.1
glib2
SUSE:Linux Enterprise Module for Basesystem 15
 before 2.54.3-4.18.1
2.54.3-4.18.1
glib2
SUSE:Linux Enterprise Module for Basesystem 15 SP1
 before 2.54.3-4.18.1
2.54.3-4.18.1
glib2
SUSE:Linux Enterprise Module for Package Hub 15
 before 2.54.3-4.18.1
2.54.3-4.18.1
glib2.0
Ubuntu:Pro:14.04:LTS
 before 2.40.2-0ubuntu1.1+esm3, plus listed versions
2.38.0-1ubuntu12.38.1-12.39.1-0ubuntu12.39.1-0ubuntu22.39.1-0ubuntu3
Show 15 moreShow less
2.39.2-0ubuntu12.39.2-0ubuntu22.39.3-0ubuntu42.39.4-0ubuntu12.39.90-0ubuntu12.39.91-0ubuntu22.39.91-0ubuntu32.39.92-22.40.0-12.40.0-1ubuntu12.40.0-22.40.2-0ubuntu12.40.2-0ubuntu1.12.40.2-0ubuntu1.1+esm12.40.2-0ubuntu1.1+esm2
2.40.2-0ubuntu1.1+esm3
glib2.0
Ubuntu:16.04:LTS
 before 2.48.2-0ubuntu4.4, plus listed versions
2.46.1-12.46.1-22.47.1-12.47.3-32.47.4-1
Show 11 moreShow less
2.47.5-12.47.6-12.48.0-1ubuntu32.48.0-1ubuntu42.48.1-1~ubuntu16.04.12.48.2-0ubuntu12.48.2-0ubuntu32.48.2-0ubuntu42.48.2-0ubuntu4.12.48.2-0ubuntu4.22.48.2-0ubuntu4.3
2.48.2-0ubuntu4.4
glib2.0
Ubuntu:18.04:LTS
 before 2.56.4-0ubuntu0.18.04.4, plus listed versions
2.54.1-1ubuntu12.55.2-2ubuntu12.56.0-2ubuntu12.56.0-4ubuntu12.56.1-2ubuntu1
Show 5 moreShow less
2.56.2-0ubuntu0.18.04.12.56.2-0ubuntu0.18.04.22.56.3-0ubuntu0.18.04.12.56.4-0ubuntu0.18.04.22.56.4-0ubuntu0.18.04.3
2.56.4-0ubuntu0.18.04.4
glib2.0
Ubuntu:16.04:LTS
 before 2.48.2-0ubuntu4.3, plus listed versions
2.46.1-12.46.1-22.47.1-12.47.3-32.47.4-1
Show 10 moreShow less
2.47.5-12.47.6-12.48.0-1ubuntu32.48.0-1ubuntu42.48.1-1~ubuntu16.04.12.48.2-0ubuntu12.48.2-0ubuntu32.48.2-0ubuntu42.48.2-0ubuntu4.12.48.2-0ubuntu4.2
2.48.2-0ubuntu4.3
glib2.0
Ubuntu:Pro:14.04:LTS
 before 2.40.2-0ubuntu1.1+esm2, plus listed versions
2.38.0-1ubuntu12.38.1-12.39.1-0ubuntu12.39.1-0ubuntu22.39.1-0ubuntu3
Show 14 moreShow less
2.39.2-0ubuntu12.39.2-0ubuntu22.39.3-0ubuntu42.39.4-0ubuntu12.39.90-0ubuntu12.39.91-0ubuntu22.39.91-0ubuntu32.39.92-22.40.0-12.40.0-1ubuntu12.40.0-22.40.2-0ubuntu12.40.2-0ubuntu1.12.40.2-0ubuntu1.1+esm1
2.40.2-0ubuntu1.1+esm2
glib2
openSUSE:Leap 15.0
 before 2.54.3-lp150.3.13.1
2.54.3-lp150.3.13.1

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2019-13012 is a high vulnerability (CVSS 7.5) in Gnome Glib, published June 28, 2019. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.21%, the 88th percentile. Fixed in glib2.0 2.60.5-1.

References

Show 134 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open