AZL-112445
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-112445.json
- JSON Data
- https://api.osv.dev/v1/vulns/AZL-112445
- Upstream
- CVE-2026-103963
- Published
- 2026-10-30T05:16:57Z
- Modified
- 2026-11-02T14:18:11Z
- Summary
- CVE-2026-103963 affecting package glib-networking 2.78.0-2
- Details
-
A flaw was found in glib-networking. When establishing connections using Transport Layer Security (TLS) version 1.3, the client-side session cache does not limit the number of session tickets retained for a single host. A malicious server can exploit this by sending excessive session ticket messages, causing the client application to continuously consume memory. This unbounded memory growth can exhaust system memory, resulting in a Denial of Service (DoS).
- References