← CVE Intelligence

CVE-2026-15588

Gdbusserver: glib2: gdbusserver pre-authentication dos via unbounded sasl line buffering PUBLISHED

Description (CNA)

A denial-of-service and resource exhaustion vulnerability exists within the `GDBus` component of GLib. The `gdbusauth` authentication mechanism fails to enforce proper length limitations on data lines read from a client. An unauthenticated local or remote attacker can exploit this lack of input validation by sending excessively long streams of data, causing the application to consume massive amounts of system memory and CPU, potentially leading to a crash or system hang.

Affected (CNA)

Vendor / productVersions
Red Hat / Red Hat Enterprise Linux 10unaffected 0:2.80.4-12.el10_2.21 before *
Red Hat / Red Hat Enterprise Linux 10.0 Extended Update Supportunaffected 0:2.80.4-4.el10_0.17 before *
Red Hat / Red Hat Enterprise Linux 7 Extended Lifecycle Supportunaffected 0:2.56.1-13.el7_9.1 before *
Red Hat / Red Hat Enterprise Linux 8unaffected 0:2.56.4-177.el8_10 before *
Red Hat / Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Supportunaffected 0:2.56.4-10.el8_4.7 before *
Red Hat / Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-Onunaffected 0:2.56.4-10.el8_4.7 before *
Red Hat / Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Supportunaffected 0:2.56.4-158.el8_6.7 before *
Red Hat / Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-Onunaffected 0:2.56.4-158.el8_6.7 before *
Red Hat / Red Hat Enterprise Linux 8.8 Telecommunications Update Serviceunaffected 0:2.56.4-165.el8_8.2 before *
Red Hat / Red Hat Enterprise Linux 8.8 Update Services for SAP Solutionsunaffected 0:2.56.4-165.el8_8.2 before *
Red Hat / Red Hat Enterprise Linux 9unaffected 0:2.68.4-19.el9_8.9 before *
Red Hat / Red Hat Enterprise Linux 9unaffected 0:2.68.4-19.el9_8.9 before *
Red Hat / Red Hat Enterprise Linux 9.2 Update Services for SAP Solutionsunaffected 0:2.68.4-7.el9_2.7 before *
Red Hat / Red Hat Enterprise Linux 9.4 Update Services for SAP Solutionsunaffected 0:2.68.4-14.el9_4.8 before *
Red Hat / Red Hat Enterprise Linux 9.6 Extended Update Supportunaffected 0:2.68.4-16.el9_6.7 before *
Red Hat / Cert Manager support for Red Hat OpenShift release 1.17unaffected 1791371080 before *
Red Hat / Cert Manager support for Red Hat OpenShift release 1.17unaffected 1791371069 before *
Red Hat / Cert Manager support for Red Hat OpenShift release 1.17unaffected 1791788287 before *
Red Hat / Cert Manager support for Red Hat OpenShift release 1.17unaffected 1791378395 before *
Red Hat / Cert Manager support for Red Hat OpenShift release 1.17unaffected 1791970484 before *
Red Hat / Cert Manager support for Red Hat OpenShift release 1.18unaffected 1791459707 before *
Red Hat / Cert Manager support for Red Hat OpenShift release 1.18unaffected 1791459711 before *
Red Hat / Cert Manager support for Red Hat OpenShift release 1.18unaffected 1791459759 before *
Red Hat / Cert Manager support for Red Hat OpenShift release 1.18unaffected 1789029076 before *
Red Hat / Cert Manager support for Red Hat OpenShift release 1.18unaffected 1791966259 before *
Red Hat / Cert Manager support for Red Hat OpenShift release 1.19unaffected 1788348522 before *
Red Hat / Cert Manager support for Red Hat OpenShift release 1.19unaffected 1788348571 before *
Red Hat / Cert Manager support for Red Hat OpenShift release 1.19unaffected 1788348571 before *
Red Hat / Cert Manager support for Red Hat OpenShift release 1.19unaffected 1788348594 before *
Red Hat / Cert Manager support for Red Hat OpenShift release 1.20unaffected 1790223279 before *
Red Hat / Cert Manager support for Red Hat OpenShift release 1.20unaffected 1790223719 before *
Red Hat / Cert Manager support for Red Hat OpenShift release 1.20unaffected 1790272426 before *
Red Hat / Cert Manager support for Red Hat OpenShift release 1.20unaffected 1790589998 before *
Red Hat / Cert Manager support for Red Hat OpenShift release 1.20unaffected 1790589912 before *
Red Hat / Cert Manager support for Red Hat OpenShift release 1.20unaffected 1790589914 before *
Red Hat / Cert Manager support for Red Hat OpenShift release 1.20unaffected 1790589855 before *
Red Hat / Cert Manager support for Red Hat OpenShift release 1.20unaffected 1790598593 before *
Red Hat / Red Hat AI Inference Server 3.2unaffected 1790621714 before *
Red Hat / Red Hat AI Inference Server 3.2unaffected 1790621718 before *
Red Hat / Red Hat AI Inference Server 3.2unaffected 1790621713 before *
Red Hat / Red Hat AI Inference Server 3.5unaffected 1791425869 before *
Red Hat / Red Hat AI Inference Server 3.5unaffected 1791427182 before *
Red Hat / Red Hat AI Inference Server 3.5unaffected 1791803821 before *
Red Hat / Red Hat AI Inference Server 3.5unaffected 1791473631 before *
Red Hat / Red Hat AI Inference Server 3.5unaffected 1791818357 before *
Red Hat / Red Hat AI Inference Server 3.5unaffected 1791473614 before *
Red Hat / Red Hat Discovery 2unaffected 1788205779 before *
Red Hat / Red Hat Discovery 2unaffected 1788206196 before *
Red Hat / Red Hat Hardened Imagesunaffected 2.89.1-1.1.hum1 before *
Red Hat / Red Hat Hardened Imagesunaffected 2.89.1-1.2.hum1 before *
Red Hat / Red Hat Hardened Imagesunaffected 2.89.2-2.hum1 before *
Red Hat / Red Hat OpenShift AI 3.0unaffected 1790276886 before *
Red Hat / Red Hat OpenShift AI 3.0unaffected 1790276884 before *
Red Hat / Red Hat OpenShift AI 3.0unaffected 1790277045 before *
Red Hat / Red Hat OpenShift AI 3.0unaffected 1790276889 before *
Red Hat / Red Hat OpenShift AI 3.0unaffected 1790276974 before *
Red Hat / Red Hat OpenShift AI 3.2unaffected 1790703497 before *
Red Hat / Red Hat OpenShift AI 3.2unaffected 1790703506 before *
Red Hat / Red Hat OpenShift AI 3.2unaffected 1790703590 before *
Red Hat / Red Hat OpenShift AI 3.2unaffected 1790703568 before *
Red Hat / Red Hat OpenShift AI 3.2unaffected 1790703586 before *
Red Hat / Red Hat OpenShift AI 3.2unaffected 1790703494 before *
Red Hat / Red Hat OpenShift AI 3.4unaffected 1790703542 before *
Red Hat / Red Hat OpenShift AI 3.4unaffected 1790703539 before *
Red Hat / Red Hat OpenShift AI 3.4unaffected 1790703553 before *
Red Hat / Red Hat OpenShift AI 3.4unaffected 1790703631 before *
Red Hat / Red Hat OpenShift AI 3.4unaffected 1790703597 before *
Red Hat / Red Hat OpenShift AI 3.4unaffected 1790703641 before *
Red Hat / Red Hat OpenShift AI 3.4unaffected 1790703630 before *
Red Hat / Red Hat OpenShift AI 3.4unaffected 1790703541 before *
Red Hat / Red Hat OpenShift AI 3.4unaffected 1790703545 before *
Red Hat / Red Hat OpenShift AI 3.4unaffected 1791231926 before *
Red Hat / Red Hat OpenShift AI 3.4unaffected 1791232048 before *
Red Hat / Red Hat OpenShift AI 3.5unaffected 1790703552 before *
Red Hat / Red Hat OpenShift AI 3.5unaffected 1790703656 before *
Red Hat / Red Hat OpenShift AI 3.5unaffected 1790703557 before *
Red Hat / Red Hat OpenShift AI 3.5unaffected 1790703707 before *
Red Hat / Red Hat OpenShift AI 3.5unaffected 1790703645 before *
Red Hat / Red Hat OpenShift AI 3.5unaffected 1790703554 before *
Red Hat / Red Hat OpenShift AI 3.5unaffected 1790703554 before *
Red Hat / Red Hat OpenShift AI 3.5unaffected 1790703630 before *
Red Hat / Red Hat OpenShift AI 3.5unaffected 1790703706 before *
Red Hat / Red Hat Update Infrastructure 5unaffected 1787241211 before *
Red Hat / Red Hat Update Infrastructure 5unaffected 1787135742 before *
Red Hat / Red Hat Update Infrastructure 5unaffected 1787241260 before *
Red Hat / Red Hat Update Infrastructure 5unaffected 1788880445 before *
Red Hat / Red Hat Update Infrastructure 5unaffected 1788880464 before *
Red Hat / Red Hat Update Infrastructure 5unaffected 1788880456 before *
Red Hat / Red Hat Update Infrastructure 5unaffected 1788765051 before *
Red Hat / Red Hat Update Infrastructure 5unaffected 1788880581 before *
Red Hat / Red Hat Enterprise Linux 10affected
Red Hat / Red Hat Enterprise Linux 6unknown
Red Hat / Red Hat Enterprise Linux 8affected
Red Hat / Red Hat Enterprise Linux 9affected
Red Hat / Red Hat OpenShift Container Platform 4affected
Red Hat / Red Hat OpenShift Container Platform 4affected

CWE

CWE-770

References

ADP enrichment

CISA-ADP

No English description supplied.