VDB
CVE-2026-15588
CVE-2026-15588
PUBLISHED
CVSS 5.3 MEDIUM
Reported by redhat · Published July 20, 2026
A denial-of-service and resource exhaustion vulnerability exists within the `GDBus` component of GLib. The `gdbusauth` authentication mechanism fails to enforce proper length limitations on data lines read from a client. An unauthenticated local or remote attacker can exploit this lack of input validation by sending excessively long streams of data, causing the application to consume massive amounts of system memory and CPU, potentially leading to a crash or system hang.
Risk Scores
CVSS 3.1
5.3
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | Red Hat Enterprise Linux 10 | 0:2.80.4-12.el10_2.21 |
| Red Hat | Red Hat Enterprise Linux 9 | 0:2.68.4-19.el9_8.9 |
| Red Hat | Red Hat Enterprise Linux 9 | 0:2.68.4-19.el9_8.9 |
| Red Hat | Red Hat Hardened Images | 2.89.1-1.1.hum1 |
| Red Hat | Red Hat Hardened Images | 2.89.1-1.2.hum1 |
| Red Hat | Red Hat Hardened Images | 2.89.2-2.hum1 |
| Red Hat | Red Hat Enterprise Linux 10 | |
| Red Hat | Red Hat Enterprise Linux 6 | |
| Red Hat | Red Hat Enterprise Linux 7 | |
| Red Hat | Red Hat Enterprise Linux 8 | |
| Red Hat | Red Hat Enterprise Linux 8 | |
| Red Hat | Red Hat Enterprise Linux 9 | |
| Red Hat | Red Hat OpenShift Container Platform 4 | |
| Red Hat | Red Hat Enterprise Linux 6 | |
| Red Hat | Red Hat OpenShift Container Platform 4 | |
| Red Hat | Red Hat Enterprise Linux 8 | |
| Red Hat | Red Hat Enterprise Linux 10 | 0:2.80.4-12.el10_2.21, 0:2.80.4-12.el10_2.21 |
| Red Hat | Red Hat Enterprise Linux 9 | |
| Red Hat | Red Hat Enterprise Linux 7 | |
| Red Hat | Red Hat Enterprise Linux 8 |
…and 4 more
Timeline
- Jul 20, 2026 CVE Published
- Jul 21, 2026 Security Advisory
- Aug 7, 2026 EPSS Score
- Aug 17, 2026 Distribution Patch
- Aug 17, 2026 Security Advisory
- Aug 19, 2026 Distribution Patch
- Aug 19, 2026 Security Advisory
- Aug 21, 2026 Distribution Patch
- Aug 21, 2026 Distribution Patch
- Aug 22, 2026 Distribution Patch
- Aug 22, 2026 Distribution Patch
- Aug 22, 2026 Distribution Patch
References
- RHSA-2026:39985 vendor-advisoryx_refsource_REDHAT
- RHSA-2026:40485 vendor-advisoryx_refsource_REDHAT
- RHSA-2026:42329 vendor-advisoryx_refsource_REDHAT
- RHSA-2026:55440 vendor-advisoryx_refsource_REDHAT
- RHSA-2026:57015 vendor-advisoryx_refsource_REDHAT
- vdb-entryx_refsource_REDHAT
- RHBZ#2499675 issue-trackingx_refsource_REDHAT