CVE-2025-13601
HIGH
中文标题:
（暂无数据）
英文标题:
Glib: integer overflow in in g_escape_uri_string()
CVSS分数:
7.7
发布时间:
2025-11-26 14:44:22
漏洞类型:
（暂无数据）
状态:
PUBLISHED
数据质量分数:
0.40
数据版本:
v11
漏洞描述
中文描述:
（暂无数据）
英文描述:
A heap-based buffer overflow problem was found in glib through an incorrect calculation of buffer size in the g_escape_uri_string() function. If the string to escape contains a very large number of unacceptable characters (which would need escaping), the calculation of the length of the escaped string could overflow, leading to a potential write off the end of the newly allocated string.
CWE类型:
CWE-190
标签:
（暂无数据）
受影响产品
| 厂商 | 产品 | 版本 | 版本范围 | 平台 | CPE |
|---|---|---|---|---|---|
| Red Hat | Red Hat Enterprise Linux 10 | - | - | - |
cpe:/o:redhat:enterprise_linux:10
|
| Red Hat | Red Hat Enterprise Linux 6 | - | - | - |
cpe:/o:redhat:enterprise_linux:6
|
| Red Hat | Red Hat Enterprise Linux 7 | - | - | - |
cpe:/o:redhat:enterprise_linux:7
|
| Red Hat | Red Hat Enterprise Linux 8 | - | - | - |
cpe:/o:redhat:enterprise_linux:8
|
| Red Hat | Red Hat Enterprise Linux 9 | - | - | - |
cpe:/o:redhat:enterprise_linux:9
|
| Red Hat | Red Hat OpenShift Container Platform 4 | - | - | - |
cpe:/a:redhat:openshift:4
|
| redhat | codeready_linux_builder | 9.0 | - | - |
cpe:2.3:a:redhat:codeready_linux_builder:9.0:*:*:*:*:*:aarch64:*
|
| redhat | codeready_linux_builder_for_ibm_z_systems | 9.0_s390x | - | - |
cpe:2.3:a:redhat:codeready_linux_builder_for_ibm_z_systems:9.0_s390x:*:*:*:*:*:*:*
|
| redhat | codeready_linux_builder_for_power_little_endian | 9.0_ppc64le | - | - |
cpe:2.3:a:redhat:codeready_linux_builder_for_power_little_endian:9.0_ppc64le:*:*:*:*:*:*:*
|
| redhat | codeready_linux_builder_for_x86_64 | 9.0 | - | - |
cpe:2.3:a:redhat:codeready_linux_builder_for_x86_64:9.0:*:*:*:*:*:*:*
|
| redhat | enterprise_linux_for_arm_64 | 9.0 | - | - |
cpe:2.3:o:redhat:enterprise_linux_for_arm_64:9.0:*:*:*:*:*:aarch64:*
|
| redhat | enterprise_linux_for_ibm_z_systems | 9.0_s390x | - | - |
cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:9.0_s390x:*:*:*:*:*:*:*
|
| redhat | enterprise_linux_for_power_little_endian | 9.0_ppc64le | - | - |
cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian:9.0_ppc64le:*:*:*:*:*:*:*
|
| redhat | enterprise_linux_for_x86_64 | 9.0 | - | - |
cpe:2.3:o:redhat:enterprise_linux_for_x86_64:9.0:*:*:*:*:*:*:*
|
| redhat | codeready_linux_builder_for_arm64 | 10.0 | - | - |
cpe:2.3:a:redhat:codeready_linux_builder_for_arm64:10.0:*:*:*:*:*:aarch64:*
|
| redhat | codeready_linux_builder_for_ibm_z_systems | 10.0_s390x | - | - |
cpe:2.3:a:redhat:codeready_linux_builder_for_ibm_z_systems:10.0_s390x:*:*:*:*:*:*:*
|
| redhat | codeready_linux_builder_for_power_little_endian | 10.0_ppc64le | - | - |
cpe:2.3:a:redhat:codeready_linux_builder_for_power_little_endian:10.0_ppc64le:*:*:*:*:*:*:*
|
| redhat | codeready_linux_builder_for_x86_64 | 10.0 | - | - |
cpe:2.3:a:redhat:codeready_linux_builder_for_x86_64:10.0:*:*:*:*:*:*:*
|
| redhat | enterprise_linux_for_arm_64 | 10.0 | - | - |
cpe:2.3:o:redhat:enterprise_linux_for_arm_64:10.0:*:*:*:*:*:aarch64:*
|
| redhat | enterprise_linux_for_ibm_z_systems | 10.0_s390x | - | - |
cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:10.0_s390x:*:*:*:*:*:*:*
|
| redhat | enterprise_linux_for_power_little_endian | 10.0_ppc64le | - | - |
cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian:10.0_ppc64le:*:*:*:*:*:*:*
|
| redhat | enterprise_linux_for_x86_64 | 10.0 | - | - |
cpe:2.3:o:redhat:enterprise_linux_for_x86_64:10.0:*:*:*:*:*:*:*
|
| redhat | codeready_linux_builder_for_arm64 | 8.0 | - | - |
cpe:2.3:a:redhat:codeready_linux_builder_for_arm64:8.0:*:*:*:*:*:aarch64:*
|
| redhat | codeready_linux_builder_for_ibm_z_systems | 8.0_s390x | - | - |
cpe:2.3:a:redhat:codeready_linux_builder_for_ibm_z_systems:8.0_s390x:*:*:*:*:*:*:*
|
| redhat | codeready_linux_builder_for_power_little_endian | 8.0_ppc64le | - | - |
cpe:2.3:a:redhat:codeready_linux_builder_for_power_little_endian:8.0_ppc64le:*:*:*:*:*:*:*
|
| redhat | codeready_linux_builder_for_x86_64 | 8.0 | - | - |
cpe:2.3:a:redhat:codeready_linux_builder_for_x86_64:8.0:*:*:*:*:*:*:*
|
| redhat | enterprise_linux_for_arm_64 | 8.0 | - | - |
cpe:2.3:o:redhat:enterprise_linux_for_arm_64:8.0:*:*:*:*:*:aarch64:*
|
| redhat | enterprise_linux_for_ibm_z_systems | 8.0_s390x | - | - |
cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:8.0_s390x:*:*:*:*:*:*:*
|
| redhat | enterprise_linux_for_power_little_endian | 8.0_ppc64le | - | - |
cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian:8.0_ppc64le:*:*:*:*:*:*:*
|
| redhat | enterprise_linux_for_x86_64 | 8.0 | - | - |
cpe:2.3:o:redhat:enterprise_linux_for_x86_64:8.0:*:*:*:*:*:*:*
|
| redhat | enterprise_linux_for_arm_64 | 9.2 | - | - |
cpe:2.3:o:redhat:enterprise_linux_for_arm_64:9.2:*:*:*:*:*:aarch64:*
|
| redhat | enterprise_linux_for_ibm_z_systems | 9.2_s390x | - | - |
cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:9.2_s390x:*:*:*:*:*:*:*
|
| redhat | enterprise_linux_for_power_little_endian | 9.2_ppc64le | - | - |
cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian:9.2_ppc64le:*:*:*:*:*:*:*
|
| redhat | enterprise_linux_for_x86_64 | 9.2 | - | - |
cpe:2.3:o:redhat:enterprise_linux_for_x86_64:9.2:*:*:*:*:*:*:*
|
| redhat | enterprise_linux_server_aus | 9.2 | - | - |
cpe:2.3:o:redhat:enterprise_linux_server_aus:9.2:*:*:*:*:*:*:*
|
| redhat | codeready_linux_builder_for_arm64_eus | 9.4 | - | - |
cpe:2.3:a:redhat:codeready_linux_builder_for_arm64_eus:9.4:*:*:*:*:*:aarch64:*
|
| redhat | codeready_linux_builder_for_ibm_z_systems | 9.4_s390x | - | - |
cpe:2.3:a:redhat:codeready_linux_builder_for_ibm_z_systems:9.4_s390x:*:*:*:*:*:*:*
|
| redhat | codeready_linux_builder_for_power_little_endian | 9.4_ppc64le | - | - |
cpe:2.3:a:redhat:codeready_linux_builder_for_power_little_endian:9.4_ppc64le:*:*:*:*:*:*:*
|
| redhat | codeready_linux_builder_for_x86_64 | 9.4 | - | - |
cpe:2.3:a:redhat:codeready_linux_builder_for_x86_64:9.4:*:*:*:*:*:*:*
|
| redhat | enterprise_linux_for_arm_64 | 9.4 | - | - |
cpe:2.3:o:redhat:enterprise_linux_for_arm_64:9.4:*:*:*:*:*:aarch64:*
|
| redhat | enterprise_linux_for_ibm_z_systems | 9.4_s390x | - | - |
cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:9.4_s390x:*:*:*:*:*:*:*
|
| redhat | enterprise_linux_for_power_little_endian | 9.4_ppc64le | - | - |
cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian:9.4_ppc64le:*:*:*:*:*:*:*
|
| redhat | enterprise_linux_for_x86_64 | 9.4 | - | - |
cpe:2.3:o:redhat:enterprise_linux_for_x86_64:9.4:*:*:*:*:*:*:*
|
| redhat | enterprise_linux_for_x86_64_eus | 9.4 | - | - |
cpe:2.3:o:redhat:enterprise_linux_for_x86_64_eus:9.4:*:*:*:*:*:*:*
|
| redhat | enterprise_linux_server_aus | 9.4 | - | - |
cpe:2.3:o:redhat:enterprise_linux_server_aus:9.4:*:*:*:*:*:*:*
|
| redhat | enterprise_linux_server_for_power_little_endian | 9.4_ppc64le | - | - |
cpe:2.3:o:redhat:enterprise_linux_server_for_power_little_endian:9.4_ppc64le:*:*:*:*:*:*:*
|
| redhat | enterprise_linux_server_for_power_little_endian_eus | 9.4_ppc64le | - | - |
cpe:2.3:o:redhat:enterprise_linux_server_for_power_little_endian_eus:9.4_ppc64le:*:*:*:*:*:*:*
|
| redhat | codeready_linux_builder_for_arm64_eus | 10.0 | - | - |
cpe:2.3:a:redhat:codeready_linux_builder_for_arm64_eus:10.0:*:*:*:*:*:aarch64:*
|
| redhat | codeready_linux_builder_for_ibm_z_systems_eus | 10.0_s390x | - | - |
cpe:2.3:a:redhat:codeready_linux_builder_for_ibm_z_systems_eus:10.0_s390x:*:*:*:*:*:*:*
|
| redhat | codeready_linux_builder_for_power_little_endian_eus | 10.0_ppc64le | - | - |
cpe:2.3:a:redhat:codeready_linux_builder_for_power_little_endian_eus:10.0_ppc64le:*:*:*:*:*:*:*
|
| redhat | codeready_linux_builder_for_x86_64_eus | 10.0 | - | - |
cpe:2.3:a:redhat:codeready_linux_builder_for_x86_64_eus:10.0:*:*:*:*:*:*:*
|
| redhat | enterprise_linux_for_arm_64_eus | 10.0 | - | - |
cpe:2.3:o:redhat:enterprise_linux_for_arm_64_eus:10.0:*:*:*:*:*:aarch64:*
|
| redhat | enterprise_linux_for_ibm_z_systems_eus | 10.0_s390x | - | - |
cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:10.0_s390x:*:*:*:*:*:*:*
|
| redhat | enterprise_linux_for_power_little_endian_eus | 10.0_ppc64le | - | - |
cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:10.0_ppc64le:*:*:*:*:*:*:*
|
| redhat | enterprise_linux_for_x86_64_eus | 10.0 | - | - |
cpe:2.3:o:redhat:enterprise_linux_for_x86_64_eus:10.0:*:*:*:*:*:*:*
|
| redhat | enterprise_linux_server_for_power_little_endian | 10.0_ppc64le | - | - |
cpe:2.3:o:redhat:enterprise_linux_server_for_power_little_endian:10.0_ppc64le:*:*:*:*:*:*:*
|
| redhat | codeready_linux_builder_for_arm64 | 9.6 | - | - |
cpe:2.3:a:redhat:codeready_linux_builder_for_arm64:9.6:*:*:*:*:*:aarch64:*
|
| redhat | codeready_linux_builder_for_ibm_z_systems | 9.6_s390x | - | - |
cpe:2.3:a:redhat:codeready_linux_builder_for_ibm_z_systems:9.6_s390x:*:*:*:*:*:*:*
|
| redhat | codeready_linux_builder_for_power_little_endian | 9.6_ppc64le | - | - |
cpe:2.3:a:redhat:codeready_linux_builder_for_power_little_endian:9.6_ppc64le:*:*:*:*:*:*:*
|
| redhat | codeready_linux_builder_for_x86_64 | 9.6 | - | - |
cpe:2.3:a:redhat:codeready_linux_builder_for_x86_64:9.6:*:*:*:*:*:*:*
|
| redhat | enterprise_linux_for_arm_64 | 9.6 | - | - |
cpe:2.3:o:redhat:enterprise_linux_for_arm_64:9.6:*:*:*:*:*:aarch64:*
|
| redhat | enterprise_linux_for_ibm_z_systems | 9.6_s390x | - | - |
cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:9.6_s390x:*:*:*:*:*:*:*
|
| redhat | enterprise_linux_for_power_little_endian | 9.6_ppc64le | - | - |
cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian:9.6_ppc64le:*:*:*:*:*:*:*
|
| redhat | enterprise_linux_for_power_little_endian_eus | 9.6_ppc64le | - | - |
cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:9.6_ppc64le:*:*:*:*:*:*:*
|
| redhat | enterprise_linux_for_x86_64 | 9.6 | - | - |
cpe:2.3:o:redhat:enterprise_linux_for_x86_64:9.6:*:*:*:*:*:*:*
|
| redhat | enterprise_linux_for_x86_64_eus | 9.6 | - | - |
cpe:2.3:o:redhat:enterprise_linux_for_x86_64_eus:9.6:*:*:*:*:*:*:*
|
| redhat | enterprise_linux_server_aus | 9.6 | - | - |
cpe:2.3:o:redhat:enterprise_linux_server_aus:9.6:*:*:*:*:*:*:*
|
| redhat | enterprise_linux_server_for_power_little_endian | 9.6_ppc64le | - | - |
cpe:2.3:o:redhat:enterprise_linux_server_for_power_little_endian:9.6_ppc64le:*:*:*:*:*:*:*
|
| redhat | enterprise_linux_for_x86_64 | 8.6 | - | - |
cpe:2.3:o:redhat:enterprise_linux_for_x86_64:8.6:*:*:*:*:*:*:*
|
| redhat | enterprise_linux_for_x86_64_eus | 8.6 | - | - |
cpe:2.3:o:redhat:enterprise_linux_for_x86_64_eus:8.6:*:*:*:*:*:*:*
|
| redhat | enterprise_linux_server_aus | 8.6 | - | - |
cpe:2.3:o:redhat:enterprise_linux_server_aus:8.6:*:*:*:*:*:*:*
|
| redhat | enterprise_linux_server_for_power_little_endian | 8.6_ppc64le | - | - |
cpe:2.3:o:redhat:enterprise_linux_server_for_power_little_endian:8.6_ppc64le:*:*:*:*:*:*:*
|
| redhat | enterprise_linux_server_tus | 8.6 | - | - |
cpe:2.3:o:redhat:enterprise_linux_server_tus:8.6:*:*:*:*:*:*:*
|
| redhat | enterprise_linux_for_x86_64 | 8.8 | - | - |
cpe:2.3:o:redhat:enterprise_linux_for_x86_64:8.8:*:*:*:*:*:*:*
|
| redhat | enterprise_linux_for_x86_64_eus | 8.8 | - | - |
cpe:2.3:o:redhat:enterprise_linux_for_x86_64_eus:8.8:*:*:*:*:*:*:*
|
| redhat | enterprise_linux_server_for_power_little_endian | 8.8_ppc64le | - | - |
cpe:2.3:o:redhat:enterprise_linux_server_for_power_little_endian:8.8_ppc64le:*:*:*:*:*:*:*
|
| redhat | enterprise_linux_server_tus | 8.8 | - | - |
cpe:2.3:o:redhat:enterprise_linux_server_tus:8.8:*:*:*:*:*:*:*
|
| redhat | enterprise_linux_for_x86_64_eus | 8.4 | - | - |
cpe:2.3:o:redhat:enterprise_linux_for_x86_64_eus:8.4:*:*:*:*:*:*:*
|
| redhat | enterprise_linux_server_aus | 8.4 | - | - |
cpe:2.3:o:redhat:enterprise_linux_server_aus:8.4:*:*:*:*:*:*:*
|
| redhat | enterprise_linux_server_aus | 8.2 | - | - |
cpe:2.3:o:redhat:enterprise_linux_server_aus:8.2:*:*:*:*:*:*:*
|
| redhat | ceph_storage | 8.0 | - | - |
cpe:2.3:a:redhat:ceph_storage:8.0:*:*:*:*:*:*:*
|
| redhat | discovery | 2.0 | - | - |
cpe:2.3:a:redhat:discovery:2.0:*:*:*:*:*:*:*
|
| gnome | glib | * | - | - |
cpe:2.3:a:gnome:glib:*:*:*:*:*:*:*:*
|
解决方案
中文解决方案:
（暂无数据）
英文解决方案:
（暂无数据）
临时解决方案:
（暂无数据）
参考链接
无标题
vdb-entry
cve.org
访问
cve.org
RHBZ#2416741
issue-tracking
cve.org
访问
cve.org
无标题
OTHER
cve.org
访问
cve.org
无标题
OTHER
cve.org
访问
cve.org
secalert@redhat.com
OTHER
nvd.nist.gov
访问
nvd.nist.gov
secalert@redhat.com
OTHER
nvd.nist.gov
访问
nvd.nist.gov
secalert@redhat.com
OTHER
nvd.nist.gov
访问
nvd.nist.gov
secalert@redhat.com
OTHER
nvd.nist.gov
访问
nvd.nist.gov
secalert@redhat.com
OTHER
nvd.nist.gov
访问
nvd.nist.gov
secalert@redhat.com
OTHER
nvd.nist.gov
访问
nvd.nist.gov
secalert@redhat.com
OTHER
nvd.nist.gov
访问
nvd.nist.gov
secalert@redhat.com
OTHER
nvd.nist.gov
访问
nvd.nist.gov
secalert@redhat.com
OTHER
nvd.nist.gov
访问
nvd.nist.gov
secalert@redhat.com
OTHER
nvd.nist.gov
访问
nvd.nist.gov
secalert@redhat.com
OTHER
nvd.nist.gov
访问
nvd.nist.gov
secalert@redhat.com
OTHER
nvd.nist.gov
访问
nvd.nist.gov
secalert@redhat.com
OTHER
nvd.nist.gov
访问
nvd.nist.gov
secalert@redhat.com
OTHER
nvd.nist.gov
访问
nvd.nist.gov
secalert@redhat.com
OTHER
nvd.nist.gov
访问
nvd.nist.gov
secalert@redhat.com
OTHER
nvd.nist.gov
访问
nvd.nist.gov
secalert@redhat.com
OTHER
nvd.nist.gov
访问
nvd.nist.gov
secalert@redhat.com
OTHER
nvd.nist.gov
访问
nvd.nist.gov
secalert@redhat.com
OTHER
nvd.nist.gov
访问
nvd.nist.gov
CVSS评分详情
3.1 (cna)
HIGH
7.7
CVSS向量:
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
机密性
NONE
完整性
HIGH
可用性
HIGH
时间信息
发布时间:
2025-11-26 14:44:22
修改时间:
2025-11-27 15:03:21
创建时间:
2026-01-12 02:11:00
更新时间:
2026-02-14 06:00:03
利用信息
暂无可利用代码信息
数据源详情
| 数据源 | 记录ID | 版本 | 提取时间 |
|---|---|---|---|
| CVE | cve_CVE-2025-13601 |
2025-11-28 02:50:41 | 2026-01-12 02:11:00 |
| NVD | nvd_CVE-2025-13601 |
2025-12-02 03:00:02 | 2026-01-12 02:27:29 |
版本与语言
当前版本:
v11
主要语言:
EN
支持语言:
EN
安全公告
暂无安全公告信息
变更历史
v11
NVD
2026-02-14 06:00:03
references_count: 22 → 23
查看详细变更
- references_count: 22 -> 23
v10
NVD
2026-02-12 06:00:06
references_count: 20 → 22
查看详细变更
- references_count: 20 -> 22
v9
NVD
2026-02-11 06:00:07
references_count: 19 → 20
查看详细变更
- references_count: 19 -> 20
v8
NVD
2026-02-07 06:02:40
affected_products_count: 6 → 83
查看详细变更
- affected_products_count: 6 -> 83
v7
NVD
2026-02-03 06:00:14
references_count: 12 → 19
查看详细变更
- references_count: 12 -> 19
v6
NVD
2026-01-29 06:00:16
references_count: 11 → 12
查看详细变更
- references_count: 11 -> 12
v5
NVD
2026-01-28 06:00:17
references_count: 7 → 11
查看详细变更
- references_count: 7 -> 11
v4
NVD
2026-01-23 06:00:15
references_count: 5 → 7
查看详细变更
- references_count: 5 -> 7
v3
NVD
2026-01-22 06:00:13
references_count: 4 → 5
查看详细变更
- references_count: 4 -> 5
v2
NVD
2026-01-12 02:27:29
affected_products_count: 9 → 6; data_sources: ['cve'] → ['cve', 'nvd']
查看详细变更
- affected_products_count: 9 -> 6
- data_sources: ['cve'] -> ['cve', 'nvd']