CVE-2026-15588

A denial-of-service and resource exhaustion vulnerability exists within the `GDBus` component of GLib. The `gdbusauth` authentication mechanism fails to enforce proper length limitations on data lines read from a client. An unauthenticated local or remote attacker can exploit this lack of input validation by sending excessively long streams of data, causing the application to consume massive amounts of system memory and CPU, potentially leading to a crash or system hang.

CVSS v3 5.3 MEDIUM

5.3^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 1.8 / Impact : 3.4

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact LOW

Availability Impact LOW

Scope UNCHANGED

References

Link	Resource
https://access.redhat.com/errata/RHSA-2026:39985
https://access.redhat.com/errata/RHSA-2026:40485
https://access.redhat.com/errata/RHSA-2026:42329
https://access.redhat.com/errata/RHSA-2026:55440
https://access.redhat.com/errata/RHSA-2026:57015
https://access.redhat.com/errata/RHSA-2026:58981
https://access.redhat.com/errata/RHSA-2026:61766
https://access.redhat.com/errata/RHSA-2026:61783
https://access.redhat.com/errata/RHSA-2026:63135
https://access.redhat.com/errata/RHSA-2026:63138
https://access.redhat.com/errata/RHSA-2026:63140
https://access.redhat.com/errata/RHSA-2026:65762
https://access.redhat.com/errata/RHSA-2026:65763
https://access.redhat.com/errata/RHSA-2026:65767
https://access.redhat.com/errata/RHSA-2026:65768
https://access.redhat.com/errata/RHSA-2026:65769
https://access.redhat.com/errata/RHSA-2026:65770
https://access.redhat.com/errata/RHSA-2026:65771
https://access.redhat.com/errata/RHSA-2026:65773
https://access.redhat.com/errata/RHSA-2026:66018
https://access.redhat.com/security/cve/CVE-2026-15588
https://bugzilla.redhat.com/show_bug.cgi?id=2499675
https://gitlab.gnome.org/GNOME/glib/-/issues/3985
https://gitlab.gnome.org/GNOME/glib/-/issues/3985

Configurations

No configuration.

History

No history.

Information

Published : 2026-07-20 12:17

Updated : 2026-09-10 18:17

NVD link : CVE-2026-15588

Mitre link : CVE-2026-15588

CVE.ORG link : CVE-2026-15588

JSON object : View

Products Affected

No product.

CWE

CWE-770

Allocation of Resources Without Limits or Throttling

{"id": "CVE-2026-15588", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-15588", "role": "CISA Coordinator", "options": [{"exploitation": "poc"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-07-20T13:49:28.904247Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "secalert@redhat.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.3, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "LOW", "privilegesRequired": "LOW", "confidentialityImpact": "LOW"}, "impactScore": 3.4, "exploitabilityScore": 1.8}]}, "affected": [{"source": "secalert@redhat.com", "affectedData": [{"cpes": ["cpe:/o:redhat:enterprise_linux:10.2"], "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 10", "versions": [{"status": "unaffected", "version": "0:2.80.4-12.el10_2.21", "lessThan": "*", "versionType": "rpm"}], "packageName": "glib2", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/o:redhat:enterprise_linux_eus:10.0"], "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 10.0 Extended Update Support", "versions": [{"status": "unaffected", "version": "0:2.80.4-4.el10_0.17", "lessThan": "*", "versionType": "rpm"}], "packageName": "glib2", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/o:redhat:rhel_els:7"], "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 7 Extended Lifecycle Support", "versions": [{"status": "unaffected", "version": "0:2.56.1-13.el7_9.1", "lessThan": "*", "versionType": "rpm"}], "packageName": "glib2", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:enterprise_linux:8::crb", "cpe:/o:redhat:enterprise_linux:8::baseos"], "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 8", "versions": [{"status": "unaffected", "version": "0:2.56.4-177.el8_10", "lessThan": "*", "versionType": "rpm"}], "packageName": "glib2", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/o:redhat:rhel_aus:8.4::baseos", "cpe:/o:redhat:rhel_eus_long_life:8.4::baseos"], "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support", "versions": [{"status": "unaffected", "version": "0:2.56.4-10.el8_4.7", "lessThan": "*", "versionType": "rpm"}], "packageName": "glib2", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/o:redhat:rhel_aus:8.4::baseos", "cpe:/o:redhat:rhel_eus_long_life:8.4::baseos"], "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On", "versions": [{"status": "unaffected", "version": "0:2.56.4-10.el8_4.7", "lessThan": "*", "versionType": "rpm"}], "packageName": "glib2", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/o:redhat:rhel_aus:8.6::baseos", "cpe:/o:redhat:rhel_eus_long_life:8.6::baseos"], "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support", "versions": [{"status": "unaffected", "version": "0:2.56.4-158.el8_6.7", "lessThan": "*", "versionType": "rpm"}], "packageName": "glib2", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/o:redhat:rhel_aus:8.6::baseos", "cpe:/o:redhat:rhel_eus_long_life:8.6::baseos"], "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On", "versions": [{"status": "unaffected", "version": "0:2.56.4-158.el8_6.7", "lessThan": "*", "versionType": "rpm"}], "packageName": "glib2", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/o:redhat:rhel_e4s:8.8::baseos", "cpe:/o:redhat:rhel_tus:8.8::baseos"], "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 8.8 Telecommunications Update Service", "versions": [{"status": "unaffected", "version": "0:2.56.4-165.el8_8.2", "lessThan": "*", "versionType": "rpm"}], "packageName": "glib2", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/o:redhat:rhel_e4s:8.8::baseos", "cpe:/o:redhat:rhel_tus:8.8::baseos"], "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions", "versions": [{"status": "unaffected", "version": "0:2.56.4-165.el8_8.2", "lessThan": "*", "versionType": "rpm"}], "packageName": "glib2", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:enterprise_linux:9::appstream", "cpe:/a:redhat:enterprise_linux:9::crb", "cpe:/o:redhat:enterprise_linux:9::baseos"], "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 9", "versions": [{"status": "unaffected", "version": "0:2.68.4-19.el9_8.9", "lessThan": "*", "versionType": "rpm"}], "packageName": "glib2", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:enterprise_linux:9::appstream", "cpe:/a:redhat:enterprise_linux:9::crb", "cpe:/o:redhat:enterprise_linux:9::baseos"], "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 9", "versions": [{"status": "unaffected", "version": "0:2.68.4-19.el9_8.9", "lessThan": "*", "versionType": "rpm"}], "packageName": "glib2", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:rhel_e4s:9.2::appstream", "cpe:/o:redhat:rhel_e4s:9.2::baseos"], "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions", "versions": [{"status": "unaffected", "version": "0:2.68.4-7.el9_2.7", "lessThan": "*", "versionType": "rpm"}], "packageName": "glib2", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:rhel_e4s:9.4::appstream", "cpe:/o:redhat:rhel_e4s:9.4::baseos"], "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions", "versions": [{"status": "unaffected", "version": "0:2.68.4-14.el9_4.8", "lessThan": "*", "versionType": "rpm"}], "packageName": "glib2", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:rhel_eus:9.6::appstream", "cpe:/a:redhat:rhel_eus:9.6::crb", "cpe:/o:redhat:rhel_eus:9.6::baseos"], "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 9.6 Extended Update Support", "versions": [{"status": "unaffected", "version": "0:2.68.4-16.el9_6.7", "lessThan": "*", "versionType": "rpm"}], "packageName": "glib2", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:cert_manager:1.19::el9"], "vendor": "Red Hat", "product": "Cert Manager support for Red Hat OpenShift release 1.19", "versions": [{"status": "unaffected", "version": "1788348522", "lessThan": "*", "versionType": "rpm"}], "packageName": "cert-manager/cert-manager-operator-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:cert_manager:1.19::el9"], "vendor": "Red Hat", "product": "Cert Manager support for Red Hat OpenShift release 1.19", "versions": [{"status": "unaffected", "version": "1788348571", "lessThan": "*", "versionType": "rpm"}], "packageName": "cert-manager/jetstack-cert-manager-acmesolver-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:cert_manager:1.19::el9"], "vendor": "Red Hat", "product": "Cert Manager support for Red Hat OpenShift release 1.19", "versions": [{"status": "unaffected", "version": "1788348571", "lessThan": "*", "versionType": "rpm"}], "packageName": "cert-manager/jetstack-cert-manager-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:cert_manager:1.19::el9"], "vendor": "Red Hat", "product": "Cert Manager support for Red Hat OpenShift release 1.19", "versions": [{"status": "unaffected", "version": "1788348594", "lessThan": "*", "versionType": "rpm"}], "packageName": "cert-manager/cert-manager-istio-csr-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:discovery:2::el9"], "vendor": "Red Hat", "product": "Red Hat Discovery 2", "versions": [{"status": "unaffected", "version": "1788205779", "lessThan": "*", "versionType": "rpm"}], "packageName": "discovery/discovery-server-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:discovery:2::el9"], "vendor": "Red Hat", "product": "Red Hat Discovery 2", "versions": [{"status": "unaffected", "version": "1788206196", "lessThan": "*", "versionType": "rpm"}], "packageName": "discovery/discovery-ui-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:hummingbird:1"], "vendor": "Red Hat", "product": "Red Hat Hardened Images", "versions": [{"status": "unaffected", "version": "2.89.1-1.1.hum1", "lessThan": "*", "versionType": "rpm"}], "packageName": "glib2-main", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:hummingbird:1"], "vendor": "Red Hat", "product": "Red Hat Hardened Images", "versions": [{"status": "unaffected", "version": "2.89.1-1.2.hum1", "lessThan": "*", "versionType": "rpm"}], "packageName": "glib2-main", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:hummingbird:1"], "vendor": "Red Hat", "product": "Red Hat Hardened Images", "versions": [{"status": "unaffected", "version": "2.89.2-2.hum1", "lessThan": "*", "versionType": "rpm"}], "packageName": "glib2-main", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:rhui:5::el9"], "vendor": "Red Hat", "product": "Red Hat Update Infrastructure 5", "versions": [{"status": "unaffected", "version": "1787241211", "lessThan": "*", "versionType": "rpm"}], "packageName": "rhui5/cds-kubernetes-tp-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:rhui:5::el9"], "vendor": "Red Hat", "product": "Red Hat Update Infrastructure 5", "versions": [{"status": "unaffected", "version": "1787135742", "lessThan": "*", "versionType": "rpm"}], "packageName": "rhui5/installer-tp-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:rhui:5::el9"], "vendor": "Red Hat", "product": "Red Hat Update Infrastructure 5", "versions": [{"status": "unaffected", "version": "1787241260", "lessThan": "*", "versionType": "rpm"}], "packageName": "rhui5/rhua-tp-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:rhui:5::el9"], "vendor": "Red Hat", "product": "Red Hat Update Infrastructure 5", "versions": [{"status": "unaffected", "version": "1788880445", "lessThan": "*", "versionType": "rpm"}], "packageName": "rhui5/cds-kubernetes-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:rhui:5::el9"], "vendor": "Red Hat", "product": "Red Hat Update Infrastructure 5", "versions": [{"status": "unaffected", "version": "1788880464", "lessThan": "*", "versionType": "rpm"}], "packageName": "rhui5/cds-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:rhui:5::el9"], "vendor": "Red Hat", "product": "Red Hat Update Infrastructure 5", "versions": [{"status": "unaffected", "version": "1788880456", "lessThan": "*", "versionType": "rpm"}], "packageName": "rhui5/haproxy-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:rhui:5::el9"], "vendor": "Red Hat", "product": "Red Hat Update Infrastructure 5", "versions": [{"status": "unaffected", "version": "1788765051", "lessThan": "*", "versionType": "rpm"}], "packageName": "rhui5/installer-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:rhui:5::el9"], "vendor": "Red Hat", "product": "Red Hat Update Infrastructure 5", "versions": [{"status": "unaffected", "version": "1788880581", "lessThan": "*", "versionType": "rpm"}], "packageName": "rhui5/rhua-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/o:redhat:enterprise_linux:10"], "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 10", "packageName": "mingw-glib2", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/o:redhat:enterprise_linux:6"], "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 6", "packageName": "glib2", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/o:redhat:enterprise_linux:8"], "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 8", "packageName": "mingw-glib2", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/o:redhat:enterprise_linux:9"], "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 9", "packageName": "mingw-glib2", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift:4"], "vendor": "Red Hat", "product": "Red Hat OpenShift Container Platform 4", "packageName": "openshift/ose-rhel-coreos-8", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift:4"], "vendor": "Red Hat", "product": "Red Hat OpenShift Container Platform 4", "packageName": "openshift/ose-rhel-coreos-9", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}]}], "published": "2026-07-20T12:17:55.220", "references": [{"url": "https://access.redhat.com/errata/RHSA-2026:39985", "source": "secalert@redhat.com"}, {"url": "https://access.redhat.com/errata/RHSA-2026:40485", "source": "secalert@redhat.com"}, {"url": "https://access.redhat.com/errata/RHSA-2026:42329", "source": "secalert@redhat.com"}, {"url": "https://access.redhat.com/errata/RHSA-2026:55440", "source": "secalert@redhat.com"}, {"url": "https://access.redhat.com/errata/RHSA-2026:57015", "source": "secalert@redhat.com"}, {"url": "https://access.redhat.com/errata/RHSA-2026:58981", "source": "secalert@redhat.com"}, {"url": "https://access.redhat.com/errata/RHSA-2026:61766", "source": "secalert@redhat.com"}, {"url": "https://access.redhat.com/errata/RHSA-2026:61783", "source": "secalert@redhat.com"}, {"url": "https://access.redhat.com/errata/RHSA-2026:63135", "source": "secalert@redhat.com"}, {"url": "https://access.redhat.com/errata/RHSA-2026:63138", "source": "secalert@redhat.com"}, {"url": "https://access.redhat.com/errata/RHSA-2026:63140", "source": "secalert@redhat.com"}, {"url": "https://access.redhat.com/errata/RHSA-2026:65762", "source": "secalert@redhat.com"}, {"url": "https://access.redhat.com/errata/RHSA-2026:65763", "source": "secalert@redhat.com"}, {"url": "https://access.redhat.com/errata/RHSA-2026:65767", "source": "secalert@redhat.com"}, {"url": "https://access.redhat.com/errata/RHSA-2026:65768", "source": "secalert@redhat.com"}, {"url": "https://access.redhat.com/errata/RHSA-2026:65769", "source": "secalert@redhat.com"}, {"url": "https://access.redhat.com/errata/RHSA-2026:65770", "source": "secalert@redhat.com"}, {"url": "https://access.redhat.com/errata/RHSA-2026:65771", "source": "secalert@redhat.com"}, {"url": "https://access.redhat.com/errata/RHSA-2026:65773", "source": "secalert@redhat.com"}, {"url": "https://access.redhat.com/errata/RHSA-2026:66018", "source": "secalert@redhat.com"}, {"url": "https://access.redhat.com/security/cve/CVE-2026-15588", "source": "secalert@redhat.com"}, {"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2499675", "source": "secalert@redhat.com"}, {"url": "https://gitlab.gnome.org/GNOME/glib/-/issues/3985", "source": "secalert@redhat.com"}, {"url": "https://gitlab.gnome.org/GNOME/glib/-/issues/3985", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"}], "vulnStatus": "Awaiting Analysis", "weaknesses": [{"type": "Secondary", "source": "secalert@redhat.com", "description": [{"lang": "en", "value": "CWE-770"}]}], "descriptions": [{"lang": "en", "value": "A denial-of-service and resource exhaustion vulnerability exists within the `GDBus` component of GLib. The `gdbusauth` authentication mechanism fails to enforce proper length limitations on data lines read from a client. An unauthenticated local or remote attacker can exploit this lack of input validation by sending excessively long streams of data, causing the application to consume massive amounts of system memory and CPU, potentially leading to a crash or system hang."}], "lastModified": "2026-09-10T18:17:56.303", "sourceIdentifier": "secalert@redhat.com"}