{"id":"CVE-2020-36774","details":"plugins/gtk+/glade-gtk-box.c in GNOME Glade before 3.38.1 and 3.39.x before 3.40.0 mishandles widget rebuilding for GladeGtkBox, leading to a denial of service (application crash).","modified":"2026-08-27T08:15:15.391496Z","published":"2024-02-19T02:15:47.690Z","related":["SUSE-SU-2024:0983-1","openSUSE-SU-2024:13737-1"],"references":[{"type":"REPORT","url":"https://gitlab.gnome.org/GNOME/glade/-/issues/479"},{"type":"FIX","url":"https://gitlab.gnome.org/GNOME/glade/-/commit/7acdd3c6f6934f47b8974ebc2190a59ea5d2ed17"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://gitlab.gnome.org/Archive/glade","events":[{"introduced":"0"},{"fixed":"9b3f55387f03920e1bf1cea9b7e9c911421cbb3e"},{"introduced":"4449499b98f4fe1d877a8fb77846e82abb3373f8"},{"fixed":"b3823efd0acea2b0a5629b261cf56b1d3f2664aa"}],"database_specific":{"extracted_events":[{"introduced":"0"},{"fixed":"3.38.1"},{"introduced":"3.39.0"},{"fixed":"3.40.0"}],"source":"CPE_RANGE","cpe":"cpe:2.3:a:gnome:glade:*:*:*:*:*:*:*:*"}}],"versions":["3.39.0","GLADE_3_38_0","GLADE_3_37_0","GLADE_3_36_0","GLADE_3_22_0","GLADE_3_21_0","GLADE_3_19_0","GLADE_3_18_0","GLADE_3_15_3","GLADE_3_15_0","GLADE_3_13_0","GLADE_3_12_0_BRANCHPOINT","GLADE_3_11_0","GLADE_3_10_0","GLADE_3_9_2","GLADE_3_9_1","GLADE_3_7_0-GOOD_TAG","GLADE_3_7_0","GLADE3_3_4_1","GLADE_3_6_7","GLADE_3_6_6","GLADE_3_6_5","GLADE_3_6_4_1","GLADE_3_6_4","GLADE_3_6_2","GLADE_3_6_1","GLADE_3_6_0","GLADE_3_5_6","GLADE_3_5_5","GLADE_3_5_4","GLADE3_3_5_3","GLADE3_3_5_2","GLADE3_3_5_1","GLADE3_3_5_0","GLADE3_3_4_3","GLADE3_3_4_2","GLADE_3_4_0","GLADE_3_3_4","GLADE_3_3_3","GLADE_3_3_2","gdl-integration-branchpoint","BINDINGS_BRANCHPOINT","GLADE_3_1_5","GLADE_3_3_1","GLADE_3_3_0","GLADE_3_2_1","GLADE3_3_1_4","GLADE3_3_1_2","GLADE3_3_1_1","GLADE3_3_1_0","GLADE3_3_0_BRANCHPOINT","GLADE3_3_0_2","GLADE3_3_0_1","GLADE3_3_0_0","BEFORE_GWIDGET_MADNESS","WITH_EMBEDDED_DEVHELP","TRISTAN_MERGING_HERE","GLADE3_2_91_0","GLADE3_2_90_0","MERGEPOINT_2004_12_23","LIBGLADE_INTEGRATION_BRANCHPOINT","glade3_may_01_2002_chema","initial-tag"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-36774.json"}},{"ranges":[{"type":"GIT","repo":"https://gitlab.gnome.org/gnome/glade","events":[{"introduced":"0"},{"fixed":"7acdd3c6f6934f47b8974ebc2190a59ea5d2ed17"}],"database_specific":{"source":"REFERENCES"}}],"versions":["3.39.0","GLADE_3_38_0-master","GLADE_3_37_0","GLADE_3_36_0","GLADE_3_22_0","GLADE_3_21_0","GLADE_3_19_0","GLADE_3_18_0","GLADE_3_15_3","GLADE_3_15_0","GLADE_3_13_0","GLADE_3_12_0_BRANCHPOINT","GLADE_3_11_0","GLADE_3_10_0","GLADE_3_9_2","GLADE_3_9_1","GLADE_3_7_0-GOOD_TAG","GLADE_3_7_0","GLADE3_3_4_1","GLADE_3_6_7","GLADE_3_6_6","GLADE_3_6_5","GLADE_3_6_4_1","GLADE_3_6_4","GLADE_3_6_2","GLADE_3_6_1","GLADE_3_6_0","GLADE_3_5_6","GLADE_3_5_5","GLADE_3_5_4","GLADE3_3_5_3","GLADE3_3_5_2","GLADE3_3_5_1","GLADE3_3_5_0","GLADE3_3_4_3","GLADE3_3_4_2","GLADE_3_4_0","GLADE_3_3_4","GLADE_3_3_3","GLADE_3_3_2","gdl-integration-branchpoint","BINDINGS_BRANCHPOINT","GLADE_3_1_5","GLADE_3_3_1","GLADE_3_3_0","GLADE_3_2_1","GLADE3_3_1_4","GLADE3_3_1_2","GLADE3_3_1_1","GLADE3_3_1_0","GLADE3_3_0_BRANCHPOINT","GLADE3_3_0_2","GLADE3_3_0_1","GLADE3_3_0_0","BEFORE_GWIDGET_MADNESS","WITH_EMBEDDED_DEVHELP","TRISTAN_MERGING_HERE","GLADE3_2_91_0","GLADE3_2_90_0","MERGEPOINT_2004_12_23","LIBGLADE_INTEGRATION_BRANCHPOINT","glade3_may_01_2002_chema","initial-tag"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-36774.json","vanir_signatures_modified":"2026-08-27T08:15:15Z","vanir_signatures":[{"id":"CVE-2020-36774-a5f45597","signature_type":"Function","signature_version":"v1","source":"https://gitlab.gnome.org/gnome/glade@7acdd3c6f6934f47b8974ebc2190a59ea5d2ed17","target":{"file":"plugins/gtk+/glade-gtk-box.c","function":"glade_gtk_box_parse_finished"},"deprecated":false,"digest":{"length":176,"function_hash":"307368606446353136947592234079502264117"}},{"signature_type":"Function","signature_version":"v1","source":"https://gitlab.gnome.org/gnome/glade@7acdd3c6f6934f47b8974ebc2190a59ea5d2ed17","target":{"file":"plugins/gtk+/glade-gtk-box.c","function":"glade_gtk_box_post_create"},"deprecated":false,"digest":{"function_hash":"273645112142073447654811026851383595822","length":624},"id":"CVE-2020-36774-b649b178"},{"source":"https://gitlab.gnome.org/gnome/glade@7acdd3c6f6934f47b8974ebc2190a59ea5d2ed17","target":{"file":"plugins/gtk+/glade-gtk-box.c"},"deprecated":false,"digest":{"line_hashes":["71081337418139500699604546006361688498","271105865218993971018807268627461713728","51266226412292034618199513765405256840","2378464528736120561824680083751265204","41187992290823588264669772732711646948","265512081101826627788372940360033443552","261241086098696881248733941089892445165","217502435002740108870059323958147628141","9934298491679355225067161025621766188","150692597567369966177357651953326965960","315757415396063941704457394598115600426","280701434773061212581248690901137147534","329205568837313782569916192654218219538","17468350802994015984428774959254630967"],"threshold":0.9},"id":"CVE-2020-36774-f405eb6d","signature_type":"Line","signature_version":"v1"}]}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"}]}