CVE-2026-15567

A flaw was found in Wildfly. A remote unauthenticated attacker can trigger OutOfMemoryError as CSIv2Util's GSS token decoder reads an attacker-controlled length field without bounds checking and attempts to allocate a byte array of that size.
Configurations

No configuration.

History

25 Sep 2026, 13:17

Type Values Removed Values Added
References
  • () https://access.redhat.com/errata/RHSA-2026:70277 -

22 Sep 2026, 16:17

Type Values Removed Values Added
References
  • () https://access.redhat.com/errata/RHSA-2026:70228 -
  • () https://access.redhat.com/errata/RHSA-2026:70229 -
  • () https://access.redhat.com/errata/RHSA-2026:70230 -

18 Sep 2026, 00:16

Type Values Removed Values Added
References
  • () https://access.redhat.com/errata/RHSA-2026:53646 -

17 Sep 2026, 19:16

Type Values Removed Values Added
References
  • () https://access.redhat.com/errata/RHSA-2026:53644 -
  • () https://access.redhat.com/errata/RHSA-2026:53645 -

Information

Published : 2026-08-11 09:17

Updated : 2026-10-22 20:17


NVD link : CVE-2026-15567

Mitre link : CVE-2026-15567

CVE.ORG link : CVE-2026-15567


JSON object : View

Products Affected

No product.

CWE
CWE-789

Memory Allocation with Excessive Size Value