{"id":"UBUNTU-CVE-2019-25085","details":"A vulnerability was found in GNOME gvdb. It has been classified as critical. This affects the function gvdb_table_write_contents_async of the file gvdb-builder.c. The manipulation leads to use after free. It is possible to initiate the attack remotely. The name of the patch is d83587b2a364eb9a9a53be7e6a708074e252de14. It is recommended to apply a patch to fix this issue. The identifier VDB-216789 was assigned to this vulnerability.","modified":"2025-07-16T07:39:59.862685Z","published":"2022-12-26T07:15:00Z","withdrawn":"2025-07-18T16:45:37Z","upstream":["CVE-2019-25085"],"references":[{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2019-25085"},{"type":"REPORT","url":"https://github.com/GNOME/gvdb/commit/d83587b2a364eb9a9a53be7e6a708074e252de14"},{"type":"REPORT","url":"https://vuldb.com/?ctiid.216789"},{"type":"REPORT","url":"https://vuldb.com/?id.216789"},{"type":"REPORT","url":"https://www.cve.org/CVERecord?id=CVE-2019-25085"}],"affected":[{"package":{"name":"epiphany-browser","ecosystem":"Ubuntu:18.04:LTS","purl":"pkg:deb/ubuntu/epiphany-browser@3.28.6-0ubuntu1?arch=source&distro=bionic"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.28.6-0ubuntu1"}]}],"versions":["3.26.1-1ubuntu1","3.26.1-1ubuntu2","3.26.1-1ubuntu4","3.26.5.1-1ubuntu1","3.27.90-1ubuntu1","3.28.0.1-1ubuntu1","3.28.1-1ubuntu1","3.28.5-0ubuntu1"],"ecosystem_specific":{"availability":"No subscription required","binaries":[{"binary_name":"epiphany-browser","binary_version":"3.28.6-0ubuntu1"},{"binary_name":"epiphany-browser-data","binary_version":"3.28.6-0ubuntu1"},{"binary_name":"epiphany-browser-dbgsym","binary_version":"3.28.6-0ubuntu1"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2019/UBUNTU-CVE-2019-25085.json"}},{"package":{"name":"glib2.0","ecosystem":"Ubuntu:18.04:LTS","purl":"pkg:deb/ubuntu/glib2.0@2.56.4-0ubuntu0.18.04.9?arch=source&distro=bionic"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.56.4-0ubuntu0.18.04.9"}]}],"versions":["2.54.1-1ubuntu1","2.55.2-2ubuntu1","2.56.0-2ubuntu1","2.56.0-4ubuntu1","2.56.1-2ubuntu1","2.56.2-0ubuntu0.18.04.1","2.56.2-0ubuntu0.18.04.2","2.56.3-0ubuntu0.18.04.1","2.56.4-0ubuntu0.18.04.2","2.56.4-0ubuntu0.18.04.3","2.56.4-0ubuntu0.18.04.4","2.56.4-0ubuntu0.18.04.5","2.56.4-0ubuntu0.18.04.6","2.56.4-0ubuntu0.18.04.7","2.56.4-0ubuntu0.18.04.8"],"ecosystem_specific":{"availability":"No subscription required","binaries":[{"binary_name":"libglib2.0-0","binary_version":"2.56.4-0ubuntu0.18.04.9"},{"binary_version":"2.56.4-0ubuntu0.18.04.9","binary_name":"libglib2.0-0-dbgsym"},{"binary_name":"libglib2.0-bin","binary_version":"2.56.4-0ubuntu0.18.04.9"},{"binary_name":"libglib2.0-bin-dbgsym","binary_version":"2.56.4-0ubuntu0.18.04.9"},{"binary_name":"libglib2.0-data","binary_version":"2.56.4-0ubuntu0.18.04.9"},{"binary_version":"2.56.4-0ubuntu0.18.04.9","binary_name":"libglib2.0-dev"},{"binary_name":"libglib2.0-dev-bin","binary_version":"2.56.4-0ubuntu0.18.04.9"},{"binary_name":"libglib2.0-dev-bin-dbgsym","binary_version":"2.56.4-0ubuntu0.18.04.9"},{"binary_name":"libglib2.0-doc","binary_version":"2.56.4-0ubuntu0.18.04.9"},{"binary_name":"libglib2.0-tests","binary_version":"2.56.4-0ubuntu0.18.04.9"},{"binary_name":"libglib2.0-tests-dbgsym","binary_version":"2.56.4-0ubuntu0.18.04.9"},{"binary_version":"2.56.4-0ubuntu0.18.04.9","binary_name":"libglib2.0-udeb"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2019/UBUNTU-CVE-2019-25085.json"}},{"package":{"name":"epiphany-browser","ecosystem":"Ubuntu:20.04:LTS","purl":"pkg:deb/ubuntu/epiphany-browser@3.36.4-0ubuntu2?arch=source&distro=focal"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.36.4-0ubuntu2"}]}],"versions":["3.34.1-1","3.34.1-1build1","3.36.0-1","3.36.1-1","3.36.2-0ubuntu1","3.36.3-0ubuntu1","3.36.4-0ubuntu1"],"ecosystem_specific":{"binaries":[{"binary_name":"epiphany-browser","binary_version":"3.36.4-0ubuntu2"},{"binary_name":"epiphany-browser-data","binary_version":"3.36.4-0ubuntu2"},{"binary_name":"epiphany-browser-dbgsym","binary_version":"3.36.4-0ubuntu2"}],"availability":"No subscription required"},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2019/UBUNTU-CVE-2019-25085.json"}},{"package":{"name":"glib2.0","ecosystem":"Ubuntu:20.04:LTS","purl":"pkg:deb/ubuntu/glib2.0@2.64.6-1~ubuntu20.04.4?arch=source&distro=focal"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.64.6-1~ubuntu20.04.4"}]}],"versions":["2.62.1-1","2.63.1-2","2.63.1-2ubuntu1","2.63.3-1","2.63.3-3","2.63.5-2","2.64.0-1","2.64.1-1","2.64.2-1~fakesync1","2.64.3-1~ubuntu20.04.1","2.64.6-1~ubuntu20.04.1","2.64.6-1~ubuntu20.04.2","2.64.6-1~ubuntu20.04.3"],"ecosystem_specific":{"availability":"No subscription required","binaries":[{"binary_name":"libglib2.0-0","binary_version":"2.64.6-1~ubuntu20.04.4"},{"binary_name":"libglib2.0-0-dbgsym","binary_version":"2.64.6-1~ubuntu20.04.4"},{"binary_name":"libglib2.0-bin","binary_version":"2.64.6-1~ubuntu20.04.4"},{"binary_name":"libglib2.0-bin-dbgsym","binary_version":"2.64.6-1~ubuntu20.04.4"},{"binary_name":"libglib2.0-data","binary_version":"2.64.6-1~ubuntu20.04.4"},{"binary_name":"libglib2.0-dev","binary_version":"2.64.6-1~ubuntu20.04.4"},{"binary_name":"libglib2.0-dev-bin","binary_version":"2.64.6-1~ubuntu20.04.4"},{"binary_name":"libglib2.0-dev-bin-dbgsym","binary_version":"2.64.6-1~ubuntu20.04.4"},{"binary_name":"libglib2.0-doc","binary_version":"2.64.6-1~ubuntu20.04.4"},{"binary_name":"libglib2.0-tests","binary_version":"2.64.6-1~ubuntu20.04.4"},{"binary_name":"libglib2.0-tests-dbgsym","binary_version":"2.64.6-1~ubuntu20.04.4"},{"binary_version":"2.64.6-1~ubuntu20.04.4","binary_name":"libglib2.0-udeb"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2019/UBUNTU-CVE-2019-25085.json"}},{"package":{"name":"glib2.0","ecosystem":"Ubuntu:22.04:LTS","purl":"pkg:deb/ubuntu/glib2.0@2.72.4-0ubuntu1?arch=source&distro=jammy"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.72.4-0ubuntu1"}]}],"versions":["2.68.4-1ubuntu1","2.70.1-1","2.70.2-1","2.71.0-2","2.71.1-1","2.71.2-1","2.71.3-1","2.72.0-1","2.72.1-1"],"ecosystem_specific":{"availability":"No subscription required","binaries":[{"binary_name":"libglib2.0-0","binary_version":"2.72.4-0ubuntu1"},{"binary_name":"libglib2.0-0-dbgsym","binary_version":"2.72.4-0ubuntu1"},{"binary_name":"libglib2.0-bin","binary_version":"2.72.4-0ubuntu1"},{"binary_name":"libglib2.0-bin-dbgsym","binary_version":"2.72.4-0ubuntu1"},{"binary_name":"libglib2.0-data","binary_version":"2.72.4-0ubuntu1"},{"binary_version":"2.72.4-0ubuntu1","binary_name":"libglib2.0-dev"},{"binary_name":"libglib2.0-dev-bin","binary_version":"2.72.4-0ubuntu1"},{"binary_name":"libglib2.0-dev-bin-dbgsym","binary_version":"2.72.4-0ubuntu1"},{"binary_name":"libglib2.0-doc","binary_version":"2.72.4-0ubuntu1"},{"binary_name":"libglib2.0-tests","binary_version":"2.72.4-0ubuntu1"},{"binary_version":"2.72.4-0ubuntu1","binary_name":"libglib2.0-tests-dbgsym"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2019/UBUNTU-CVE-2019-25085.json"}}],"schema_version":"1.7.3","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L"},{"type":"Ubuntu","score":"medium"}]}