CVE-2019-9633

gio/gsocketclient.c in GNOME GLib 2.59.2 does not ensure that a parent GTask remains alive during the execution of a connection-attempting enumeration, which allows remote attackers to cause a denial of service (g_socket_client_connected_callback mishandling and application crash) via a crafted web site, as demonstrated by GNOME Web (aka Epiphany).

This issue affects only the versions of glib2-2.59.1 and is fixed in version 2.59.2. The 2.59.1 was an unstable release and wasn't shipped with Red Hat Enterprise Linux 6, 7 and 8, hence Red Hat Enterprise Linux is not affected by this vulnerability.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.