Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2024-52533

29
FAUCET Score

CVE-2024-52533 is a critical off-by-one error and buffer overflow vulnerability in the gio/gsocks4aproxy.c component of GNOME GLib, affecting Debian, GNOME, and NetApp products. This flaw, stemming from an insufficient buffer size for a null terminator, allows for remote, unauthenticated attacks with low complexity, leading to complete compromise of confidentiality, integrity, and availability. While the vulnerability has a CVSS score of 9.8 (CRITICAL) and a FAUCET Risk Score of 93/100, there is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or KEV listing. However, it has garnered some community discussion and media coverage, indicating awareness of the issue.

Impacted Technologies

VendorProductVersion(s)CPE
< 2.82.1CPE matchmatch criteria
cpe:2.3:a:gnome:glib:*:*:*:*:*:*:*:*
11.0CPE matchmatch criteria
cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*
Range not provided by sourceCPE matchmatch criteria
cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*
10CPE matchmatch criteria
cpe:2.3:a:netapp:ontap_tools:10:*:*:*:*:vmware_vsphere:*:*

CVSS Data

CVSS version used by this source: 3.1

9.8CRITICAL

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
Exploitability Score
3.9
Impact Score
5.9
CvssVersion
3.1

Exploit Intelligence

EPSS Score
1.26%
Probability of exploitation in next 30 days
EPSS Percentile
66.6%
Percentile rank of EPSS score among Peer Group
As of 2026-07-27
Model: v2026.06.15
This CVE's current EPSS score of 0.0126 is in the 53rd percentile among its peer group of 36,897 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.3 Bluesky, 0.3 Mastodon, and 2.4 GitHub mentions.

Media Mentions

The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (39)

9001patch availablevia llm_extracted
View patch
gatsbyjspatch availablevia llm_extracted
View patch
joinmastodonpatch availablevia llm_extracted
View patch
mariadbpatch availablevia llm_extracted
View patch
microsoftpatch availablevia msrc
Product: 17744-17084Fixed in: 2.78.1-5
microsoftpatch availablevia msrc
Product: 17179-16823Fixed in: 2.71.0-3
microsoftpatch availablevia msrc
Product: cbl2 glib 2.71.0-3 on CBL Mariner 2.0Fixed in: 2.71.0-3
microsoftpatch availablevia msrc
Product: cbl2 glib 2.71.0-4 on CBL Mariner 2.0Fixed in: 2.71.0-3
microsoftpatch availablevia msrc
Product: azl3 glib 2.78.6-1 on Azure Linux 3.0Fixed in: 2.78.1-5
microsoftpatch availablevia msrc
Product: azl3 glib 2.78.1-5 on Azure Linux 3.0Fixed in: 2.78.1-5
microsoftpatch availablevia msrc
Product: 20018-17086Fixed in: 2.71.0-3
microsoftpatch availablevia msrc
Product: 18313-17086Fixed in: 2.71.0-3
microsoftpatch availablevia msrc
Product: 17571-17084Fixed in: 2.78.1-5
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 9.2 Update Services for SAP SolutionsFixed in: glib2-0:2.68.4-7.el9_2.2
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 9.4 Extended Update SupportFixed in: glib2-0:2.68.4-14.el9_4.3
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Insights proxy 1.5Fixed in: insights-proxy/insights-proxy-container-rhel9:sha256:e54a5a5f9d69dd6a03e2bcd845e2202910a188d266d4a79b12c387ceffc36f2d
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift distributed tracing 3.6.0Fixed in: rhosdt/jaeger-agent-rhel8:sha256:31e117f467424af472a05c52c52397e949cf7838bce643a3d9d24c0f57a06458
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift distributed tracing 3.6.0Fixed in: rhosdt/jaeger-all-in-one-rhel8:sha256:ef03839a45320399533becb174479f9ea4f26f381202707936d576ec6fc9ba84
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift distributed tracing 3.6.0Fixed in: rhosdt/jaeger-collector-rhel8:sha256:438037a860968172a29c12ef14353081a5fd45ffe2e5dcccd3ab5486a5824578
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 10Fixed in: glib2-0:2.80.4-4.el10_0.6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift distributed tracing 3.6.0Fixed in: rhosdt/jaeger-es-rollover-rhel8:sha256:1c4617b035c66b6b34e9b19f618f72a19da5fce644d79e24eb262f14c848bc81
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift distributed tracing 3.6.0Fixed in: rhosdt/jaeger-ingester-rhel8:sha256:03f466002ae14ef14dd0e82e0ab75c5287295f77598eed8aca6d1ac6aaa11928
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift distributed tracing 3.6.0Fixed in: rhosdt/jaeger-operator-bundle:sha256:be3feca3b19ac609e5ef829887b6d03ca3c504163ed0f9e10b2410cdfb175b72
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift distributed tracing 3.6.0Fixed in: rhosdt/jaeger-query-rhel8:sha256:8fce6e29d98acc1dd0a832cdb5c913af3edd65b81b2968fbdbf8ab434d82fe1e
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift distributed tracing 3.6.0Fixed in: rhosdt/jaeger-rhel8-operator:sha256:6f3b7f23a515ac140bdad844d60d96fecc79835a75b1d29a70f66df737f1b50c
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift distributed tracing 3.6.0Fixed in: rhosdt/jaeger-es-index-cleaner-rhel8:sha256:caadc05a8195f41d48d502458183cef05a1011c6edee343ac212b873ae98c763
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8Fixed in: glib2-0:2.56.4-166.el8_10
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8.2 Advanced Update SupportFixed in: glib2-0:2.56.4-8.el8_2.2
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update SupportFixed in: glib2-0:2.56.4-10.el8_4.2
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-OnFixed in: glib2-0:2.56.4-10.el8_4.2
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update SupportFixed in: glib2-0:2.56.4-158.el8_6.2
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8.6 Telecommunications Update ServiceFixed in: glib2-0:2.56.4-158.el8_6.2
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8.6 Update Services for SAP SolutionsFixed in: glib2-0:2.56.4-158.el8_6.2
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8.8 Telecommunications Update ServiceFixed in: glib2-0:2.56.4-162.el8_8
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8.8 Update Services for SAP SolutionsFixed in: glib2-0:2.56.4-162.el8_8
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 9Fixed in: glib2-0:2.68.4-16.el9_6.2
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 9Fixed in: mingw-glib2-0:2.78.6-2.el9
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 9.0 Update Services for SAP SolutionsFixed in: glib2-0:2.68.4-5.el9_0.2
View patch
redhatend of lifevia redhat_api
Product: Red Hat Enterprise Linux 8Fixed in: mingw-glib2

Vendor Advisories (6)

gatsbyjsllm-gatsbyjs-d2a2db116f1afcf5CRITICAL

HP ThinPro 8.1 SP6 Security Updates

Mar 3, 2025
9001llm-9001-fecf0327d92708b9CRITICAL

HP ThinPro 8.1 SP6 Security Updates

Mar 3, 2025
joinmastodonllm-joinmastodon-9b2d3b3c900c6299CRITICAL

HP ThinPro 8.1 SP6 Security Updates

Mar 3, 2025
mariadbllm-mariadb-7e20cc2309665f3eCRITICAL

HP ThinPro 8.1 SP6 Security Updates

Mar 3, 2025
microsoft2024-Nov/CVE-2024-52533Critical

gio/gsocks4aproxy.c in GNOME GLib before 2.82.1 has an off-by-one error and resultant buffer overflow because SOCKS4_CONN_MSG_LEN is not sufficient for a trailing '\0' character.

Nov 12, 2024
redhatCVE-2024-52533Moderate

glib: buffer overflow in set_connect_msg()

Nov 11, 2024

References

lists.debian.org / debian-lts-announce/2024/11/msg00020.html
Mailing ListThird Party Advisory
security.netapp.com / advisory/ntap-20241206-0009
Third Party Advisory
openwall.com / lists/oss-security/2024/11/12/11
Mailing List
gitlab.gnome.org / GNOME/glib/-/issues/3461
ExploitIssue Tracking
gitlab.gnome.org / GNOME/glib/-/releases/2.82.1
Release Notes
gitlab.gnome.org / Teams/Releng/security/-/wikis/home
Vendor Advisory