CVE-2019-14822

glib2: GLib provides the core application building blocks for libraries and applications written in C

CVE-2019-14822 is fixed in 17 products on 1 platform, first by gir1.2-ibus-1.0 1.5.17-3ubuntu5.3, released September 13, 2019. It is not reported as exploited. Patch Radar priority: High.

High
CVSS
7.1
Moderate
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0037
30th percentile

GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in GNOME, the main loop implementation, and a large set of utility functions for strings and common data structures. The Intelligent Input Bus (IBus) is an input method framework for multilingual input in Unix-like operating systems. Security Fix(es): * ibus: missing authorization allows local attacker to access the input bus of another user (CVE-2019-14822) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.2 Release Notes linked from the References section.

Where it's fixed

ProductFixed inFixReleased
Linux
gir1.2-ibus-1.0 · Ubuntu 18.04.6 LTS (bionic) 1.5.17-3ubuntu5.3 gir1.2-ibus-1.0 1.5.17-3ubuntu5.3 Sep 13, 2019
glib2 · RHEL 8 0:2.56.4-8.el8 RHSA-2020:1880 Apr 28, 2020
glib2 · ol 8 0:2.56.4-8.el8 ELSA-2020-1880 May 5, 2020
glib2-devel · RHEL 8 0:2.56.4-8.el8 RHSA-2020:1880 Apr 28, 2020
glib2-devel · ol 8 0:2.56.4-8.el8 ELSA-2020-1880 May 5, 2020
glib2-doc · RHEL 8 0:2.56.4-8.el8 RHSA-2020:1880 Apr 28, 2020
glib2-fam · RHEL 8 0:2.56.4-8.el8 RHSA-2020:1880 Apr 28, 2020
glib2-fam · ol 8 0:2.56.4-8.el8 ELSA-2020-1880 May 5, 2020
glib2-static · RHEL 8 0:2.56.4-8.el8 RHSA-2020:1880 Apr 28, 2020
glib2-tests · RHEL 8 0:2.56.4-8.el8 RHSA-2020:1880 Apr 28, 2020
glib2-tests · ol 8 0:2.56.4-8.el8 ELSA-2020-1880 May 5, 2020
ibus · RHEL 8 0:1.5.19-11.el8 RHSA-2020:1880 Apr 28, 2020
ibus · Ubuntu 18.04.6 LTS (bionic) 1.5.17-3ubuntu5.3 ibus 1.5.17-3ubuntu5.3 Sep 13, 2019
ibus-devel · RHEL 8 0:1.5.19-11.el8 RHSA-2020:1880 Apr 28, 2020
ibus-devel-docs · RHEL 8 0:1.5.19-11.el8 RHSA-2020:1880 Apr 28, 2020
ibus-gtk · Ubuntu 18.04.6 LTS (bionic) 1.5.17-3ubuntu5.3 ibus-gtk 1.5.17-3ubuntu5.3 Sep 13, 2019
ibus-gtk2 · RHEL 8 0:1.5.19-11.el8 RHSA-2020:1880 Apr 28, 2020
ibus-gtk3 · RHEL 8 0:1.5.19-11.el8 RHSA-2020:1880 Apr 28, 2020
ibus-gtk3 · Ubuntu 18.04.6 LTS (bionic) 1.5.17-3ubuntu5.3 ibus-gtk3 1.5.17-3ubuntu5.3 Sep 13, 2019
ibus-libs · RHEL 8 0:1.5.19-11.el8 RHSA-2020:1880 Apr 28, 2020
ibus-setup · RHEL 8 0:1.5.19-11.el8 RHSA-2020:1880 Apr 28, 2020
ibus-wayland · RHEL 8 0:1.5.19-11.el8 RHSA-2020:1880 Apr 28, 2020
ibus-wayland · Ubuntu 18.04.6 LTS (bionic) 1.5.17-3ubuntu5.3 ibus-wayland 1.5.17-3ubuntu5.3 Sep 13, 2019
libibus-1.0-5 · Ubuntu 18.04.6 LTS (bionic) 1.5.17-3ubuntu5.3 libibus-1.0-5 1.5.17-3ubuntu5.3 Sep 13, 2019

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.