CVE-2020-36774

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2020-36774
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-36774.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2020-36774
Downstream
Related
Published
2024-02-19T02:15:47.690Z
Modified
2026-08-27T08:15:15.391496Z
Severity
  • 5.5 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVSS Calculator
Summary
[none]
Details

plugins/gtk+/glade-gtk-box.c in GNOME Glade before 3.38.1 and 3.39.x before 3.40.0 mishandles widget rebuilding for GladeGtkBox, leading to a denial of service (application crash).

References

Affected packages

Git / gitlab.gnome.org/Archive/glade

Affected ranges

Type
GIT
Repo
https://gitlab.gnome.org/Archive/glade
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
9b3f55387f03920e1bf1cea9b7e9c911421cbb3e
Introduced
4449499b98f4fe1d877a8fb77846e82abb3373f8
Fixed
b3823efd0acea2b0a5629b261cf56b1d3f2664aa
Database specific
Show details 
{
    "cpe": "cpe:2.3:a:gnome:glade:*:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "fixed": "3.38.1"
        },
        {
            "introduced": "3.39.0"
        },
        {
            "fixed": "3.40.0"
        }
    ],
    "source": "CPE_RANGE"
}

Affected versions

3.*
3.39.0
Other
BEFORE_GWIDGET_MADNESS
BINDINGS_BRANCHPOINT
GLADE3_2_90_0
GLADE3_2_91_0
GLADE3_3_0_0
GLADE3_3_0_1
GLADE3_3_0_2
GLADE3_3_0_BRANCHPOINT
GLADE3_3_1_0
GLADE3_3_1_1
GLADE3_3_1_2
GLADE3_3_1_4
GLADE3_3_4_1
GLADE3_3_4_2
GLADE3_3_4_3
GLADE3_3_5_0
GLADE3_3_5_1
GLADE3_3_5_2
GLADE3_3_5_3
GLADE_3_10_0
GLADE_3_11_0
GLADE_3_12_0_BRANCHPOINT
GLADE_3_13_0
GLADE_3_15_0
GLADE_3_15_3
GLADE_3_18_0
GLADE_3_19_0
GLADE_3_1_5
GLADE_3_21_0
GLADE_3_22_0
GLADE_3_2_1
GLADE_3_36_0
GLADE_3_37_0
GLADE_3_38_0
GLADE_3_3_0
GLADE_3_3_1
GLADE_3_3_2
GLADE_3_3_3
GLADE_3_3_4
GLADE_3_4_0
GLADE_3_5_4
GLADE_3_5_5
GLADE_3_5_6
GLADE_3_6_0
GLADE_3_6_1
GLADE_3_6_2
GLADE_3_6_4
GLADE_3_6_4_1
GLADE_3_6_5
GLADE_3_6_6
GLADE_3_6_7
GLADE_3_7_0
GLADE_3_7_0-GOOD_TAG
GLADE_3_9_1
GLADE_3_9_2
LIBGLADE_INTEGRATION_BRANCHPOINT
MERGEPOINT_2004_12_23
TRISTAN_MERGING_HERE
WITH_EMBEDDED_DEVHELP
gdl-integration-branchpoint
glade3_may_01_2002_chema
initial-tag

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-36774.json"

Git / gitlab.gnome.org/gnome/glade

Affected ranges

Type
GIT
Repo
https://gitlab.gnome.org/gnome/glade
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
7acdd3c6f6934f47b8974ebc2190a59ea5d2ed17
Database specific
Show details 
{
    "source": "REFERENCES"
}

Affected versions

3.*
3.39.0
Other
BEFORE_GWIDGET_MADNESS
BINDINGS_BRANCHPOINT
GLADE3_2_90_0
GLADE3_2_91_0
GLADE3_3_0_0
GLADE3_3_0_1
GLADE3_3_0_2
GLADE3_3_0_BRANCHPOINT
GLADE3_3_1_0
GLADE3_3_1_1
GLADE3_3_1_2
GLADE3_3_1_4
GLADE3_3_4_1
GLADE3_3_4_2
GLADE3_3_4_3
GLADE3_3_5_0
GLADE3_3_5_1
GLADE3_3_5_2
GLADE3_3_5_3
GLADE_3_10_0
GLADE_3_11_0
GLADE_3_12_0_BRANCHPOINT
GLADE_3_13_0
GLADE_3_15_0
GLADE_3_15_3
GLADE_3_18_0
GLADE_3_19_0
GLADE_3_1_5
GLADE_3_21_0
GLADE_3_22_0
GLADE_3_2_1
GLADE_3_36_0
GLADE_3_37_0
GLADE_3_38_0-master
GLADE_3_3_0
GLADE_3_3_1
GLADE_3_3_2
GLADE_3_3_3
GLADE_3_3_4
GLADE_3_4_0
GLADE_3_5_4
GLADE_3_5_5
GLADE_3_5_6
GLADE_3_6_0
GLADE_3_6_1
GLADE_3_6_2
GLADE_3_6_4
GLADE_3_6_4_1
GLADE_3_6_5
GLADE_3_6_6
GLADE_3_6_7
GLADE_3_7_0
GLADE_3_7_0-GOOD_TAG
GLADE_3_9_1
GLADE_3_9_2
LIBGLADE_INTEGRATION_BRANCHPOINT
MERGEPOINT_2004_12_23
TRISTAN_MERGING_HERE
WITH_EMBEDDED_DEVHELP
gdl-integration-branchpoint
glade3_may_01_2002_chema
initial-tag

Database specific

vanir_signatures_modified 
"2026-08-27T08:15:15Z"
vanir_signatures 
[
    {
        "source": "https://gitlab.gnome.org/gnome/glade@7acdd3c6f6934f47b8974ebc2190a59ea5d2ed17",
        "target": {
            "function": "glade_gtk_box_parse_finished",
            "file": "plugins/gtk+/glade-gtk-box.c"
        },
        "signature_version": "v1",
        "id": "CVE-2020-36774-a5f45597",
        "signature_type": "Function",
        "deprecated": false,
        "digest": {
            "function_hash": "307368606446353136947592234079502264117",
            "length": 176.0
        }
    },
    {
        "source": "https://gitlab.gnome.org/gnome/glade@7acdd3c6f6934f47b8974ebc2190a59ea5d2ed17",
        "target": {
            "function": "glade_gtk_box_post_create",
            "file": "plugins/gtk+/glade-gtk-box.c"
        },
        "signature_version": "v1",
        "id": "CVE-2020-36774-b649b178",
        "signature_type": "Function",
        "deprecated": false,
        "digest": {
            "function_hash": "273645112142073447654811026851383595822",
            "length": 624.0
        }
    },
    {
        "source": "https://gitlab.gnome.org/gnome/glade@7acdd3c6f6934f47b8974ebc2190a59ea5d2ed17",
        "target": {
            "file": "plugins/gtk+/glade-gtk-box.c"
        },
        "signature_version": "v1",
        "id": "CVE-2020-36774-f405eb6d",
        "signature_type": "Line",
        "deprecated": false,
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "71081337418139500699604546006361688498",
                "271105865218993971018807268627461713728",
                "51266226412292034618199513765405256840",
                "2378464528736120561824680083751265204",
                "41187992290823588264669772732711646948",
                "265512081101826627788372940360033443552",
                "261241086098696881248733941089892445165",
                "217502435002740108870059323958147628141",
                "9934298491679355225067161025621766188",
                "150692597567369966177357651953326965960",
                "315757415396063941704457394598115600426",
                "280701434773061212581248690901137147534",
                "329205568837313782569916192654218219538",
                "17468350802994015984428774959254630967"
            ]
        }
    }
]
source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-36774.json"