CVE-2026-15588

EUVD-2026-45939
A denial-of-service and resource exhaustion vulnerability exists within the `GDBus` component of GLib. The `gdbusauth` authentication mechanism fails to enforce proper length limitations on data lines read from a client. An unauthenticated local or remote attacker can exploit this lack of input validation by sending excessively long streams of data, causing the application to consume massive amounts of system memory and CPU, potentially leading to a crash or system hang.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5.3 MEDIUM
LOCAL
LOW
LOW
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Awaiting analysis
This vulnerability is currently awaiting analysis.
Base Score
CVSS 3.x
EPSS Score
Percentile: 39.89%
Debian logo
Debian Releases
Debian Product
Codename
glib2.0
bookworm
postponed
bookworm (security)
vulnerable
bullseye
postponed
forky
2.90.1-2
fixed
sid
2.90.1-2
fixed
trixie
2.84.4-3~deb13u5
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
glib2.0
bionic
Fixed 2.56.4-0ubuntu0.18.04.9+esm6
released
focal
Fixed 2.64.6-1~ubuntu20.04.9+esm2
released
jammy
Fixed 2.72.4-0ubuntu2.10
released
noble
Fixed 2.80.0-6ubuntu3.9
released
resolute
Fixed 2.88.0-1ubuntu0.1
released
trusty
Fixed 2.40.2-0ubuntu1.1+esm8
released
xenial
Fixed 2.48.2-0ubuntu4.8+esm6
released
openSUSE logo
openSUSE / SLES Releases
openSUSE Product
Release
glib2-devel
suse enterprise sap 12 SP5
2.48.2-12.64.1
fixed
suse enterprise server 12 SP5
2.48.2-12.64.1
fixed
glib2-devel-static
suse enterprise sap 12 SP5
2.48.2-12.64.1
fixed
suse enterprise server 12 SP5
2.48.2-12.64.1
fixed
glib2-lang
suse enterprise sap 12 SP5
2.48.2-12.64.1
fixed
suse enterprise server 12 SP3
2.48.2-12.64.1
fixed
suse enterprise server 12 SP5
2.48.2-12.64.1
fixed
glib2-tools
suse enterprise sap 12 SP5
2.48.2-12.64.1
fixed
suse enterprise server 12 SP3
2.48.2-12.64.1
fixed
suse enterprise server 12 SP5
2.48.2-12.64.1
fixed
libgio-2_0-0
suse enterprise sap 12 SP5
2.48.2-12.64.1
fixed
suse enterprise server 12 SP3
2.48.2-12.64.1
fixed
suse enterprise server 12 SP5
2.48.2-12.64.1
fixed
libgio-2_0-0-32bit
suse enterprise sap 12 SP5
2.48.2-12.64.1
fixed
suse enterprise server 12 SP3
2.48.2-12.64.1
fixed
suse enterprise server 12 SP5
2.48.2-12.64.1
fixed
libglib-2_0-0
suse enterprise sap 12 SP5
2.48.2-12.64.1
fixed
suse enterprise server 12 SP3
2.48.2-12.64.1
fixed
suse enterprise server 12 SP5
2.48.2-12.64.1
fixed
libglib-2_0-0-32bit
suse enterprise sap 12 SP5
2.48.2-12.64.1
fixed
suse enterprise server 12 SP3
2.48.2-12.64.1
fixed
suse enterprise server 12 SP5
2.48.2-12.64.1
fixed
libgmodule-2_0-0
suse enterprise sap 12 SP5
2.48.2-12.64.1
fixed
suse enterprise server 12 SP3
2.48.2-12.64.1
fixed
suse enterprise server 12 SP5
2.48.2-12.64.1
fixed
libgmodule-2_0-0-32bit
suse enterprise sap 12 SP5
2.48.2-12.64.1
fixed
suse enterprise server 12 SP3
2.48.2-12.64.1
fixed
suse enterprise server 12 SP5
2.48.2-12.64.1
fixed
libgobject-2_0-0
suse enterprise sap 12 SP5
2.48.2-12.64.1
fixed
suse enterprise server 12 SP3
2.48.2-12.64.1
fixed
suse enterprise server 12 SP5
2.48.2-12.64.1
fixed
libgobject-2_0-0-32bit
suse enterprise sap 12 SP5
2.48.2-12.64.1
fixed
suse enterprise server 12 SP3
2.48.2-12.64.1
fixed
suse enterprise server 12 SP5
2.48.2-12.64.1
fixed
libgthread-2_0-0
suse enterprise sap 12 SP5
2.48.2-12.64.1
fixed
suse enterprise server 12 SP3
2.48.2-12.64.1
fixed
suse enterprise server 12 SP5
2.48.2-12.64.1
fixed
libgthread-2_0-0-32bit
suse enterprise sap 12 SP5
2.48.2-12.64.1
fixed
suse enterprise server 12 SP3
2.48.2-12.64.1
fixed
suse enterprise server 12 SP5
2.48.2-12.64.1
fixed
Red Hat logo
Red Hat Enterprise Linux Releases
Red Hat Product
Release
glib2
RHEL 8
0:2.56.4-177.el8_10
fixed
RHEL 8.4 AUS
0:2.56.4-10.el8_4.7
fixed
RHEL 8.6 AUS
0:2.56.4-158.el8_6.7
fixed
RHEL 8.8 E4S
0:2.56.4-165.el8_8.2
fixed
RHEL 8.8 TUS
0:2.56.4-165.el8_8.2
fixed
RHEL 9
0:2.68.4-19.el9_8.9
fixed
glib2-devel
RHEL 8
0:2.56.4-177.el8_10
fixed
RHEL 8.4 AUS
0:2.56.4-10.el8_4.7
fixed
RHEL 8.6 AUS
0:2.56.4-158.el8_6.7
fixed
RHEL 8.8 E4S
0:2.56.4-165.el8_8.2
fixed
RHEL 8.8 TUS
0:2.56.4-165.el8_8.2
fixed
RHEL 9
0:2.68.4-19.el9_8.9
fixed
glib2-doc
RHEL 8
0:2.56.4-177.el8_10
fixed
RHEL 9
0:2.68.4-19.el9_8.9
fixed
glib2-fam
RHEL 8
0:2.56.4-177.el8_10
fixed
RHEL 8.4 AUS
0:2.56.4-10.el8_4.7
fixed
RHEL 8.6 AUS
0:2.56.4-158.el8_6.7
fixed
RHEL 8.8 E4S
0:2.56.4-165.el8_8.2
fixed
RHEL 8.8 TUS
0:2.56.4-165.el8_8.2
fixed
glib2-static
RHEL 8
0:2.56.4-177.el8_10
fixed
RHEL 9
0:2.68.4-19.el9_8.9
fixed
glib2-tests
RHEL 8
0:2.56.4-177.el8_10
fixed
RHEL 8.4 AUS
0:2.56.4-10.el8_4.7
fixed
RHEL 8.6 AUS
0:2.56.4-158.el8_6.7
fixed
RHEL 8.8 E4S
0:2.56.4-165.el8_8.2
fixed
RHEL 8.8 TUS
0:2.56.4-165.el8_8.2
fixed
RHEL 9
0:2.68.4-19.el9_8.9
fixed
Azure Linux logo
Azure Linux Releases
Azure Package
Release
glib
Azure Linux 3.0
0:2.78.6-11.azl3
fixed
References