{"id":"CVE-2020-36774","details":"plugins/gtk+/glade-gtk-box.c in GNOME Glade before 3.38.1 and 3.39.x before 3.40.0 mishandles widget rebuilding for GladeGtkBox, leading to a denial of service (application crash).","modified":"2026-05-18T13:48:41.185976Z","published":"2024-02-19T02:15:47.690Z","related":["SUSE-SU-2024:0983-1","openSUSE-SU-2024:13737-1"],"database_specific":{"unresolved_ranges":[{"vendor_product":"gnome:glade","source":"CPE_FIELD","cpes":["cpe:2.3:a:gnome:glade:*:*:*:*:*:*:*:*"],"extracted_events":[{"fixed":"3.38.1"},{"introduced":"3.39.0"},{"fixed":"3.40.0"}]}]},"references":[{"type":"REPORT","url":"https://gitlab.gnome.org/GNOME/glade/-/issues/479"},{"type":"FIX","url":"https://gitlab.gnome.org/GNOME/glade/-/commit/7acdd3c6f6934f47b8974ebc2190a59ea5d2ed17"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://gitlab.gnome.org/Archive/glade","events":[{"introduced":"0"},{"fixed":"9b3f55387f03920e1bf1cea9b7e9c911421cbb3e"},{"introduced":"4449499b98f4fe1d877a8fb77846e82abb3373f8"},{"fixed":"b3823efd0acea2b0a5629b261cf56b1d3f2664aa"}],"database_specific":{"source":"DESCRIPTION","extracted_events":[{"introduced":"0"},{"fixed":"3.38.1"},{"introduced":"3.39.x"},{"fixed":"3.40.0"}]}}],"versions":["3.39.0","GLADE_3_38_0","GLADE_3_37_0","GLADE_3_36_0","GLADE_3_22_0","GLADE_3_21_0","GLADE_3_19_0","GLADE_3_18_0","GLADE_3_15_3","GLADE_3_15_0","GLADE_3_13_0","GLADE_3_12_0_BRANCHPOINT","GLADE_3_11_0","GLADE_3_10_0","GLADE_3_9_2","GLADE_3_9_1","GLADE_3_7_0-GOOD_TAG","GLADE_3_7_0","GLADE3_3_4_1","GLADE_3_6_7","GLADE_3_6_6","GLADE_3_6_5","GLADE_3_6_4_1","GLADE_3_6_4","GLADE_3_6_2","GLADE_3_6_1","GLADE_3_6_0","GLADE_3_5_6","GLADE_3_5_5","GLADE_3_5_4","GLADE3_3_5_3","GLADE3_3_5_2","GLADE3_3_5_1","GLADE3_3_5_0","GLADE3_3_4_3","GLADE3_3_4_2","GLADE_3_4_0","GLADE_3_3_4","GLADE_3_3_3","GLADE_3_3_2","gdl-integration-branchpoint","BINDINGS_BRANCHPOINT","GLADE_3_1_5","GLADE_3_3_1","GLADE_3_3_0","GLADE_3_2_1","GLADE3_3_1_4","GLADE3_3_1_2","GLADE3_3_1_1","GLADE3_3_1_0","GLADE3_3_0_BRANCHPOINT","GLADE3_3_0_2","GLADE3_3_0_1","GLADE3_3_0_0","BEFORE_GWIDGET_MADNESS","WITH_EMBEDDED_DEVHELP","TRISTAN_MERGING_HERE","GLADE3_2_91_0","GLADE3_2_90_0","MERGEPOINT_2004_12_23","LIBGLADE_INTEGRATION_BRANCHPOINT","glade3_may_01_2002_chema","initial-tag"],"database_specific":{"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2020-36774.json"}},{"ranges":[{"type":"GIT","repo":"https://gitlab.gnome.org/gnome/glade","events":[{"introduced":"0"},{"fixed":"7acdd3c6f6934f47b8974ebc2190a59ea5d2ed17"}],"database_specific":{"source":"REFERENCES"}}],"versions":["3.39.0","GLADE_3_38_0-master","GLADE_3_37_0","GLADE_3_36_0","GLADE_3_22_0","GLADE_3_21_0","GLADE_3_19_0","GLADE_3_18_0","GLADE_3_15_3","GLADE_3_15_0","GLADE_3_13_0","GLADE_3_12_0_BRANCHPOINT","GLADE_3_11_0","GLADE_3_10_0","GLADE_3_9_2","GLADE_3_9_1","GLADE_3_7_0-GOOD_TAG","GLADE_3_7_0","GLADE3_3_4_1","GLADE_3_6_7","GLADE_3_6_6","GLADE_3_6_5","GLADE_3_6_4_1","GLADE_3_6_4","GLADE_3_6_2","GLADE_3_6_1","GLADE_3_6_0","GLADE_3_5_6","GLADE_3_5_5","GLADE_3_5_4","GLADE3_3_5_3","GLADE3_3_5_2","GLADE3_3_5_1","GLADE3_3_5_0","GLADE3_3_4_3","GLADE3_3_4_2","GLADE_3_4_0","GLADE_3_3_4","GLADE_3_3_3","GLADE_3_3_2","gdl-integration-branchpoint","BINDINGS_BRANCHPOINT","GLADE_3_1_5","GLADE_3_3_1","GLADE_3_3_0","GLADE_3_2_1","GLADE3_3_1_4","GLADE3_3_1_2","GLADE3_3_1_1","GLADE3_3_1_0","GLADE3_3_0_BRANCHPOINT","GLADE3_3_0_2","GLADE3_3_0_1","GLADE3_3_0_0","BEFORE_GWIDGET_MADNESS","WITH_EMBEDDED_DEVHELP","TRISTAN_MERGING_HERE","GLADE3_2_91_0","GLADE3_2_90_0","MERGEPOINT_2004_12_23","LIBGLADE_INTEGRATION_BRANCHPOINT","glade3_may_01_2002_chema","initial-tag"],"database_specific":{"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2020-36774.json","vanir_signatures":[{"digest":{"length":176,"function_hash":"307368606446353136947592234079502264117"},"signature_version":"v1","source":"https://gitlab.gnome.org/gnome/glade@7acdd3c6f6934f47b8974ebc2190a59ea5d2ed17","signature_type":"Function","deprecated":false,"id":"CVE-2020-36774-a5f45597","target":{"function":"glade_gtk_box_parse_finished","file":"plugins/gtk+/glade-gtk-box.c"}},{"digest":{"length":624,"function_hash":"273645112142073447654811026851383595822"},"signature_version":"v1","source":"https://gitlab.gnome.org/gnome/glade@7acdd3c6f6934f47b8974ebc2190a59ea5d2ed17","signature_type":"Function","deprecated":false,"id":"CVE-2020-36774-b649b178","target":{"function":"glade_gtk_box_post_create","file":"plugins/gtk+/glade-gtk-box.c"}},{"digest":{"threshold":0.9,"line_hashes":["71081337418139500699604546006361688498","271105865218993971018807268627461713728","51266226412292034618199513765405256840","2378464528736120561824680083751265204","41187992290823588264669772732711646948","265512081101826627788372940360033443552","261241086098696881248733941089892445165","217502435002740108870059323958147628141","9934298491679355225067161025621766188","150692597567369966177357651953326965960","315757415396063941704457394598115600426","280701434773061212581248690901137147534","329205568837313782569916192654218219538","17468350802994015984428774959254630967"]},"signature_version":"v1","source":"https://gitlab.gnome.org/gnome/glade@7acdd3c6f6934f47b8974ebc2190a59ea5d2ed17","signature_type":"Line","deprecated":false,"id":"CVE-2020-36774-f405eb6d","target":{"file":"plugins/gtk+/glade-gtk-box.c"}}],"vanir_signatures_modified":"2026-05-18T13:48:41Z"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"}]}