CVE-2025-13601HIGH· 7.7MITRENVD대응게시일: 2025. 11. 26.수정일: 2026. 06. 30.CNA: secalert@redhat.comModified
A heap-based buffer overflow problem was found in glib through an incorrect calculation of buffer size in the g_escape_uri_string() function
위협 신호 · CVSS · EPSS · KEV
정기 패치· 높은 악용 신호 없음
CVSS
7.7high
이론적 심각도 점수
EPSS
0.3%상위 74.8%
30일 내 악용 확률 예측
KEV
미등재실측 악용 기록 없음
권장 대응 기한차기 업그레이드 시CISA SSVC 기준
별도 긴급 패치 불필요 — 정기 시스템 업그레이드 주기에 맞춰 조치
· KEV 미등재 · 자동화 어려움 · 부분 영향 · 내부 한정
CVSS 벡터 · 메트릭
악용 경로
공격 벡터로컬
공격 복잡도낮음
필요 권한불필요
사용자 상호작용불필요
범위불변
영향
기밀성 영향없음
무결성 영향높음
가용성 영향높음
버전별 점수
CVSS 3.17.7HIGH· 악용성 2.5· 영향도 5.2
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H약점 (CWE)
- CWE-190
정수 오버플로 — 산술 결과가 범위를 넘쳐 버퍼 오류 등으로 이어짐.
상세 설명
A heap-based buffer overflow problem was found in glib through an incorrect calculation of buffer size in the g_escape_uri_string() function. If the string to escape contains a very large number of unacceptable characters (which would need escaping), the calculation of the length of the escaped string could overflow, leading to a potential write off the end of the newly allocated string.
AI 심층 분석
공격 시나리오 · 재현 가능한 PoC 페이로드 · 즉시 적용 가능한 차단 패치를 한 번에 받아 보세요. 보안 운영팀이 그대로 점검·티켓팅에 쓸 수 있는 형태로 정리해 드립니다.
영향받는 제품·버전
- redhat codeready_linux_builderlinux
- redhat codeready_linux_builder_for_ibm_z_systemslinux
- redhat codeready_linux_builder_for_power_little_endianlinux
- redhat codeready_linux_builder_for_x86_64linux
- redhat enterprise_linux_for_arm_64linux
- redhat enterprise_linux_for_ibm_z_systemslinux
- redhat enterprise_linux_for_power_little_endianlinux
- redhat enterprise_linux_for_x86_64linux
- redhat codeready_linux_builder_for_arm64linux
- redhat codeready_linux_builder_for_ibm_z_systemslinux
- redhat codeready_linux_builder_for_power_little_endianlinux
- redhat codeready_linux_builder_for_x86_64linux
- redhat enterprise_linux_for_arm_64linux
- redhat enterprise_linux_for_ibm_z_systemslinux
- redhat enterprise_linux_for_power_little_endianlinux
- redhat enterprise_linux_for_x86_64linux
- redhat codeready_linux_builder_for_arm64linux
- redhat codeready_linux_builder_for_ibm_z_systemslinux
- redhat codeready_linux_builder_for_power_little_endianlinux
- redhat codeready_linux_builder_for_x86_64linux
- redhat enterprise_linux_for_arm_64linux
- redhat enterprise_linux_for_ibm_z_systemslinux
- redhat enterprise_linux_for_power_little_endianlinux
- redhat enterprise_linux_for_x86_64linux
- redhat enterprise_linux_for_arm_64linux
- redhat enterprise_linux_for_ibm_z_systemslinux
- redhat enterprise_linux_for_power_little_endianlinux
- redhat enterprise_linux_for_x86_64linux
- redhat enterprise_linux_server_auslinux
- redhat codeready_linux_builder_for_arm64_euslinux
- redhat codeready_linux_builder_for_ibm_z_systemslinux
- redhat codeready_linux_builder_for_power_little_endianlinux
- redhat codeready_linux_builder_for_x86_64linux
- redhat enterprise_linux_for_arm_64linux
- redhat enterprise_linux_for_ibm_z_systemslinux
- redhat enterprise_linux_for_power_little_endianlinux
- redhat enterprise_linux_for_x86_64linux
- redhat enterprise_linux_for_x86_64_euslinux
- redhat enterprise_linux_server_auslinux
- redhat enterprise_linux_server_for_power_little_endianlinux
- redhat enterprise_linux_server_for_power_little_endian_euslinux
- redhat codeready_linux_builder_for_arm64_euslinux
- redhat codeready_linux_builder_for_ibm_z_systems_euslinux
- redhat codeready_linux_builder_for_power_little_endian_euslinux
- redhat codeready_linux_builder_for_x86_64_euslinux
- redhat enterprise_linux_for_arm_64_euslinux
- redhat enterprise_linux_for_ibm_z_systems_euslinux
- redhat enterprise_linux_for_power_little_endian_euslinux
- redhat enterprise_linux_for_x86_64_euslinux
- redhat enterprise_linux_server_for_power_little_endianlinux
- redhat codeready_linux_builder_for_arm64linux
- redhat codeready_linux_builder_for_ibm_z_systemslinux
- redhat codeready_linux_builder_for_power_little_endianlinux
- redhat codeready_linux_builder_for_x86_64linux
- redhat enterprise_linux_for_arm_64linux
- redhat enterprise_linux_for_ibm_z_systemslinux
- redhat enterprise_linux_for_power_little_endianlinux
- redhat enterprise_linux_for_power_little_endian_euslinux
- redhat enterprise_linux_for_x86_64linux
- redhat enterprise_linux_for_x86_64_euslinux
- redhat enterprise_linux_server_auslinux
- redhat enterprise_linux_server_for_power_little_endianlinux
- redhat enterprise_linux_for_x86_64linux
- redhat enterprise_linux_for_x86_64_euslinux
- redhat enterprise_linux_server_auslinux
- redhat enterprise_linux_server_for_power_little_endianlinux
- redhat enterprise_linux_server_tuslinux
- redhat enterprise_linux_for_x86_64linux
- redhat enterprise_linux_for_x86_64_euslinux
- redhat enterprise_linux_server_for_power_little_endianlinux
- redhat enterprise_linux_server_tuslinux
- redhat enterprise_linux_for_x86_64_euslinux
- redhat enterprise_linux_server_auslinux
- redhat enterprise_linux_server_auslinux
- redhat ceph_storagelinux
- redhat discoverylinux
- gnome glib< 2.86.3other
- redhat openshift_container_platformlinux
- redhat openshift_container_platformlinux
- redhat openshift_container_platformlinux
- redhat openshift_container_platformlinux
- redhat openshift_container_platformlinux
- redhat openshift_container_platform_for_arm64linux
- redhat openshift_container_platform_for_arm64linux
- redhat openshift_container_platform_for_arm64linux
- redhat openshift_container_platform_for_arm64linux
- redhat openshift_container_platform_for_arm64linux
- redhat openshift_container_platform_for_ibm_zlinux
- redhat openshift_container_platform_for_ibm_zlinux
- redhat openshift_container_platform_for_ibm_zlinux
- redhat openshift_container_platform_for_ibm_zlinux
- redhat openshift_container_platform_for_ibm_zlinux
- redhat openshift_container_platform_for_linuxonelinux
- redhat openshift_container_platform_for_linuxonelinux
- redhat openshift_container_platform_for_linuxonelinux
- redhat openshift_container_platform_for_linuxonelinux
- redhat openshift_container_platform_for_linuxonelinux
- redhat openshift_container_platform_for_powerlinux
- redhat openshift_container_platform_for_powerlinux
- redhat openshift_container_platform_for_powerlinux
- redhat openshift_container_platform_for_powerlinux
- redhat openshift_container_platform_for_powerlinux
영향받는 구성 (CPE) 60
- redhat codeready_linux_builder 9.0cpe:2.3:a:redhat:codeready_linux_builder:9.0:*:*:*:*:*:aarch64:*
- redhat codeready_linux_builder_for_ibm_z_systems 9.0_s390xcpe:2.3:a:redhat:codeready_linux_builder_for_ibm_z_systems:9.0_s390x:*:*:*:*:*:*:*
- redhat codeready_linux_builder_for_power_little_endian 9.0_ppc64lecpe:2.3:a:redhat:codeready_linux_builder_for_power_little_endian:9.0_ppc64le:*:*:*:*:*:*:*
- redhat codeready_linux_builder_for_x86_64 9.0cpe:2.3:a:redhat:codeready_linux_builder_for_x86_64:9.0:*:*:*:*:*:*:*
- redhat enterprise_linux_for_arm_64 9.0cpe:2.3:o:redhat:enterprise_linux_for_arm_64:9.0:*:*:*:*:*:aarch64:*
- redhat enterprise_linux_for_ibm_z_systems 9.0_s390xcpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:9.0_s390x:*:*:*:*:*:*:*
- redhat enterprise_linux_for_power_little_endian 9.0_ppc64lecpe:2.3:o:redhat:enterprise_linux_for_power_little_endian:9.0_ppc64le:*:*:*:*:*:*:*
- redhat enterprise_linux_for_x86_64 9.0cpe:2.3:o:redhat:enterprise_linux_for_x86_64:9.0:*:*:*:*:*:*:*
- redhat codeready_linux_builder_for_arm64 10.0cpe:2.3:a:redhat:codeready_linux_builder_for_arm64:10.0:*:*:*:*:*:aarch64:*
- redhat codeready_linux_builder_for_ibm_z_systems 10.0_s390xcpe:2.3:a:redhat:codeready_linux_builder_for_ibm_z_systems:10.0_s390x:*:*:*:*:*:*:*
- redhat codeready_linux_builder_for_power_little_endian 10.0_ppc64lecpe:2.3:a:redhat:codeready_linux_builder_for_power_little_endian:10.0_ppc64le:*:*:*:*:*:*:*
- redhat codeready_linux_builder_for_x86_64 10.0cpe:2.3:a:redhat:codeready_linux_builder_for_x86_64:10.0:*:*:*:*:*:*:*
- redhat enterprise_linux_for_arm_64 10.0cpe:2.3:o:redhat:enterprise_linux_for_arm_64:10.0:*:*:*:*:*:aarch64:*
- redhat enterprise_linux_for_ibm_z_systems 10.0_s390xcpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:10.0_s390x:*:*:*:*:*:*:*
- redhat enterprise_linux_for_power_little_endian 10.0_ppc64lecpe:2.3:o:redhat:enterprise_linux_for_power_little_endian:10.0_ppc64le:*:*:*:*:*:*:*
- redhat enterprise_linux_for_x86_64 10.0cpe:2.3:o:redhat:enterprise_linux_for_x86_64:10.0:*:*:*:*:*:*:*
- redhat codeready_linux_builder_for_arm64 8.0cpe:2.3:a:redhat:codeready_linux_builder_for_arm64:8.0:*:*:*:*:*:aarch64:*
- redhat codeready_linux_builder_for_ibm_z_systems 8.0_s390xcpe:2.3:a:redhat:codeready_linux_builder_for_ibm_z_systems:8.0_s390x:*:*:*:*:*:*:*
- redhat codeready_linux_builder_for_power_little_endian 8.0_ppc64lecpe:2.3:a:redhat:codeready_linux_builder_for_power_little_endian:8.0_ppc64le:*:*:*:*:*:*:*
- redhat codeready_linux_builder_for_x86_64 8.0cpe:2.3:a:redhat:codeready_linux_builder_for_x86_64:8.0:*:*:*:*:*:*:*
- redhat enterprise_linux_for_arm_64 8.0cpe:2.3:o:redhat:enterprise_linux_for_arm_64:8.0:*:*:*:*:*:aarch64:*
- redhat enterprise_linux_for_ibm_z_systems 8.0_s390xcpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:8.0_s390x:*:*:*:*:*:*:*
- redhat enterprise_linux_for_power_little_endian 8.0_ppc64lecpe:2.3:o:redhat:enterprise_linux_for_power_little_endian:8.0_ppc64le:*:*:*:*:*:*:*
- redhat enterprise_linux_for_x86_64 8.0cpe:2.3:o:redhat:enterprise_linux_for_x86_64:8.0:*:*:*:*:*:*:*
- redhat enterprise_linux_for_arm_64 9.2cpe:2.3:o:redhat:enterprise_linux_for_arm_64:9.2:*:*:*:*:*:aarch64:*
- redhat enterprise_linux_for_ibm_z_systems 9.2_s390xcpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:9.2_s390x:*:*:*:*:*:*:*
- redhat enterprise_linux_for_power_little_endian 9.2_ppc64lecpe:2.3:o:redhat:enterprise_linux_for_power_little_endian:9.2_ppc64le:*:*:*:*:*:*:*
- redhat enterprise_linux_for_x86_64 9.2cpe:2.3:o:redhat:enterprise_linux_for_x86_64:9.2:*:*:*:*:*:*:*
- redhat enterprise_linux_server_aus 9.2cpe:2.3:o:redhat:enterprise_linux_server_aus:9.2:*:*:*:*:*:*:*
- redhat codeready_linux_builder_for_arm64_eus 9.4cpe:2.3:a:redhat:codeready_linux_builder_for_arm64_eus:9.4:*:*:*:*:*:aarch64:*
- redhat codeready_linux_builder_for_ibm_z_systems 9.4_s390xcpe:2.3:a:redhat:codeready_linux_builder_for_ibm_z_systems:9.4_s390x:*:*:*:*:*:*:*
- redhat codeready_linux_builder_for_power_little_endian 9.4_ppc64lecpe:2.3:a:redhat:codeready_linux_builder_for_power_little_endian:9.4_ppc64le:*:*:*:*:*:*:*
- redhat codeready_linux_builder_for_x86_64 9.4cpe:2.3:a:redhat:codeready_linux_builder_for_x86_64:9.4:*:*:*:*:*:*:*
- redhat enterprise_linux_for_arm_64 9.4cpe:2.3:o:redhat:enterprise_linux_for_arm_64:9.4:*:*:*:*:*:aarch64:*
- redhat enterprise_linux_for_ibm_z_systems 9.4_s390xcpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:9.4_s390x:*:*:*:*:*:*:*
- redhat enterprise_linux_for_power_little_endian 9.4_ppc64lecpe:2.3:o:redhat:enterprise_linux_for_power_little_endian:9.4_ppc64le:*:*:*:*:*:*:*
- redhat enterprise_linux_for_x86_64 9.4cpe:2.3:o:redhat:enterprise_linux_for_x86_64:9.4:*:*:*:*:*:*:*
- redhat enterprise_linux_for_x86_64_eus 9.4cpe:2.3:o:redhat:enterprise_linux_for_x86_64_eus:9.4:*:*:*:*:*:*:*
- redhat enterprise_linux_server_aus 9.4cpe:2.3:o:redhat:enterprise_linux_server_aus:9.4:*:*:*:*:*:*:*
- redhat enterprise_linux_server_for_power_little_endian 9.4_ppc64lecpe:2.3:o:redhat:enterprise_linux_server_for_power_little_endian:9.4_ppc64le:*:*:*:*:*:*:*
- redhat enterprise_linux_server_for_power_little_endian_eus 9.4_ppc64lecpe:2.3:o:redhat:enterprise_linux_server_for_power_little_endian_eus:9.4_ppc64le:*:*:*:*:*:*:*
- redhat codeready_linux_builder_for_arm64_eus 10.0cpe:2.3:a:redhat:codeready_linux_builder_for_arm64_eus:10.0:*:*:*:*:*:aarch64:*
- redhat codeready_linux_builder_for_ibm_z_systems_eus 10.0_s390xcpe:2.3:a:redhat:codeready_linux_builder_for_ibm_z_systems_eus:10.0_s390x:*:*:*:*:*:*:*
- redhat codeready_linux_builder_for_power_little_endian_eus 10.0_ppc64lecpe:2.3:a:redhat:codeready_linux_builder_for_power_little_endian_eus:10.0_ppc64le:*:*:*:*:*:*:*
- redhat codeready_linux_builder_for_x86_64_eus 10.0cpe:2.3:a:redhat:codeready_linux_builder_for_x86_64_eus:10.0:*:*:*:*:*:*:*
- redhat enterprise_linux_for_arm_64_eus 10.0cpe:2.3:o:redhat:enterprise_linux_for_arm_64_eus:10.0:*:*:*:*:*:aarch64:*
- redhat enterprise_linux_for_ibm_z_systems_eus 10.0_s390xcpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:10.0_s390x:*:*:*:*:*:*:*
- redhat enterprise_linux_for_power_little_endian_eus 10.0_ppc64lecpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:10.0_ppc64le:*:*:*:*:*:*:*
- redhat enterprise_linux_for_x86_64_eus 10.0cpe:2.3:o:redhat:enterprise_linux_for_x86_64_eus:10.0:*:*:*:*:*:*:*
- redhat enterprise_linux_server_for_power_little_endian 10.0_ppc64lecpe:2.3:o:redhat:enterprise_linux_server_for_power_little_endian:10.0_ppc64le:*:*:*:*:*:*:*
- redhat codeready_linux_builder_for_arm64 9.6cpe:2.3:a:redhat:codeready_linux_builder_for_arm64:9.6:*:*:*:*:*:aarch64:*
- redhat codeready_linux_builder_for_ibm_z_systems 9.6_s390xcpe:2.3:a:redhat:codeready_linux_builder_for_ibm_z_systems:9.6_s390x:*:*:*:*:*:*:*
- redhat codeready_linux_builder_for_power_little_endian 9.6_ppc64lecpe:2.3:a:redhat:codeready_linux_builder_for_power_little_endian:9.6_ppc64le:*:*:*:*:*:*:*
- redhat codeready_linux_builder_for_x86_64 9.6cpe:2.3:a:redhat:codeready_linux_builder_for_x86_64:9.6:*:*:*:*:*:*:*
- redhat enterprise_linux_for_arm_64 9.6cpe:2.3:o:redhat:enterprise_linux_for_arm_64:9.6:*:*:*:*:*:aarch64:*
- redhat enterprise_linux_for_ibm_z_systems 9.6_s390xcpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:9.6_s390x:*:*:*:*:*:*:*
- redhat enterprise_linux_for_power_little_endian 9.6_ppc64lecpe:2.3:o:redhat:enterprise_linux_for_power_little_endian:9.6_ppc64le:*:*:*:*:*:*:*
- redhat enterprise_linux_for_power_little_endian_eus 9.6_ppc64lecpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:9.6_ppc64le:*:*:*:*:*:*:*
- redhat enterprise_linux_for_x86_64 9.6cpe:2.3:o:redhat:enterprise_linux_for_x86_64:9.6:*:*:*:*:*:*:*
- redhat enterprise_linux_for_x86_64_eus 9.6cpe:2.3:o:redhat:enterprise_linux_for_x86_64_eus:9.6:*:*:*:*:*:*:*
참고 자료 33
- https://access.redhat.com/errata/RHSA-2026:0936Vendor Advisory
- https://access.redhat.com/errata/RHSA-2026:0975Vendor Advisory
- https://access.redhat.com/errata/RHSA-2026:0991Vendor Advisory
- https://access.redhat.com/errata/RHSA-2026:1323Vendor Advisory
- https://access.redhat.com/errata/RHSA-2026:1324Vendor Advisory
- https://access.redhat.com/errata/RHSA-2026:1326Vendor Advisory
- https://access.redhat.com/errata/RHSA-2026:1327Vendor Advisory
- https://access.redhat.com/errata/RHSA-2026:1465Vendor Advisory
- https://access.redhat.com/errata/RHSA-2026:1608Vendor Advisory
- https://access.redhat.com/errata/RHSA-2026:1624Vendor Advisory
- https://access.redhat.com/errata/RHSA-2026:1625Vendor Advisory
- https://access.redhat.com/errata/RHSA-2026:1626Vendor Advisory
- https://access.redhat.com/errata/RHSA-2026:1627Vendor Advisory
- https://access.redhat.com/errata/RHSA-2026:1652Vendor Advisory
- https://access.redhat.com/errata/RHSA-2026:1736Vendor Advisory
- https://access.redhat.com/errata/RHSA-2026:2064Vendor Advisory
- https://access.redhat.com/errata/RHSA-2026:2072Vendor Advisory
- https://access.redhat.com/errata/RHSA-2026:2485Vendor Advisory
- https://access.redhat.com/errata/RHSA-2026:2563Vendor Advisory
- https://access.redhat.com/errata/RHSA-2026:2633Vendor Advisory
- https://access.redhat.com/errata/RHSA-2026:2659Vendor Advisory
- https://access.redhat.com/errata/RHSA-2026:2671Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2025-13601Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2416741Issue TrackingVendor Advisory
- https://gitlab.gnome.org/GNOME/glib/-/issues/3827ExploitIssue Tracking
- https://gitlab.gnome.org/GNOME/glib/-/merge_requests/4914Third Party Advisory
링크 내용 불러오는 중…