AZL-92994

See a problem?

Import Source

https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-92994.json

JSON Data

https://api.osv.dev/v1/vulns/AZL-92994

Upstream

CVE-2026-15588

Published

2026-07-20T12:17:55Z

Modified

2026-08-29T05:27:27Z

Summary

CVE-2026-15588 affecting package glib for versions less than 2.78.6-11

Details

A denial-of-service and resource exhaustion vulnerability exists within the GDBus component of GLib. The gdbusauth authentication mechanism fails to enforce proper length limitations on data lines read from a client. An unauthenticated local or remote attacker can exploit this lack of input validation by sending excessively long streams of data, causing the application to consume massive amounts of system memory and CPU, potentially leading to a crash or system hang.

References

https://nvd.nist.gov/vuln/detail/CVE-2026-15588

Affected packages

Azure Linux:3 / glib

Package

Name: glib
Purl: pkg:rpm/azure-linux/glib

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.78.6-11

Database specific

source

"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-92994.json"