CVE-2019-9633

Name: CVE-2019-9633
Creator: NVD / NIST
Published: 2019-03-08T08:29:00.223+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

UnknownEPSS 2.33%

Last modified Jun 17, 2026

CVE-2019-9633 is a vulnerability of currently unknown severity. gio/gsocketclient.c in GNOME GLib 2.59.2 does not ensure that a parent GTask remains alive during the execution of a connection-attempting enumeration, which allows remote attackers to cause a denial of service (g_socket_client_connected_callback mishandling and application crash) via a crafted web site, as demonstrated by GNOME Web (aka Epiphany).. EPSS estimates a 2.33% chance of exploitation in the next 30 days.

Description

gio/gsocketclient.c in GNOME GLib 2.59.2 does not ensure that a parent GTask remains alive during the execution of a connection-attempting enumeration, which allows remote attackers to cause a denial of service (g_socket_client_connected_callback mishandling and application crash) via a crafted web site, as demonstrated by GNOME Web (aka Epiphany).

Metrics

EPSS Probability

2.33%

81.4th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

CWE-754

Affected Software

Vendor	Product	Versions
Gnome	Glib	2.59.2

References

http://www.securityfocus.com/bid/107391Third Party Advisory, VDB Entry
https://gitlab.gnome.org/GNOME/glib/issues/1649Vendor Advisory
http://www.securityfocus.com/bid/107391Third Party Advisory, VDB Entry
https://gitlab.gnome.org/GNOME/glib/issues/1649Vendor Advisory

Timeline

Published: Mar 8, 2019
Last Modified: Jun 17, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2019-9633?

How severe is CVE-2019-9633?

Severity scoring for CVE-2019-9633 is pending analysis. The EPSS model estimates a 2.33% probability of exploitation in the next 30 days.

How do I fix CVE-2019-9633?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2019-9633?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST