CVE-2025-11374: 
Consul vulnerability analysis and mitigation

CVE-2025-4373 is a buffer underflow vulnerability discovered in GLib through the glib/gstring.c file, specifically in the gstringinsert_unichar() function. The vulnerability was disclosed on May 6, 2025, affecting GLib library systems which provide core application building blocks for libraries and applications written in C (Red Hat Advisory, NVD).

The vulnerability occurs due to an integer overflow in the gstringinsert_unichar() function. When the position at which to insert the character is large, the position will overflow, leading to a buffer underwrite. The vulnerability has been assigned a CVSS v3.1 base score of 4.8 (Medium) with the vector string CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L, indicating network accessibility with high attack complexity (NVD).

The buffer underflow vulnerability can potentially lead to system instability and unauthorized memory access. The CVSS scoring indicates that while confidentiality impact is none, there are low impacts to both integrity and availability of the affected systems (NVD).

Red Hat has released security updates to address this vulnerability in affected versions of glib2. Users are advised to update to version 2.68.4-14.el9_4.3 or later. The fix has been distributed through various Red Hat Enterprise Linux channels including Extended Update Support and Update Services for SAP Solutions (Red Hat Advisory).