{"id":"CVE-2019-9633","details":"gio/gsocketclient.c in GNOME GLib 2.59.2 does not ensure that a parent GTask remains alive during the execution of a connection-attempting enumeration, which allows remote attackers to cause a denial of service (g_socket_client_connected_callback mishandling and application crash) via a crafted web site, as demonstrated by GNOME Web (aka Epiphany).","modified":"2026-08-07T16:35:36.872949Z","published":"2019-03-08T08:29:00.223Z","references":[{"type":"ADVISORY","url":"http://www.securityfocus.com/bid/107391"},{"type":"ADVISORY","url":"https://gitlab.gnome.org/GNOME/glib/issues/1649"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/gnome/glib","events":[{"introduced":"bc1443b2b68252f6530b06b61de4f95c112c6b20"},{"last_affected":"bc1443b2b68252f6530b06b61de4f95c112c6b20"}],"database_specific":{"cpe":"cpe:2.3:a:gnome:glib:2.59.2:*:*:*:*:*:*:*","extracted_events":[{"introduced":"2.59.2"},{"last_affected":"2.59.2"}],"source":"CPE_STRING"}}],"versions":["2.59.2"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-9633.json"}},{"ranges":[{"type":"GIT","repo":"https://gitlab.gnome.org/gnome/glib","events":[{"introduced":"bc1443b2b68252f6530b06b61de4f95c112c6b20"},{"last_affected":"bc1443b2b68252f6530b06b61de4f95c112c6b20"}],"database_specific":{"extracted_events":[{"introduced":"2.59.2"},{"last_affected":"2.59.2"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:gnome:glib:2.59.2:*:*:*:*:*:*:*"}}],"versions":["2.59.2"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-9633.json"}}],"schema_version":"1.8.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"}]}