CVE-2026-15588
Received Received - Intake

Denial-of-Service in GLib GDBus via Resource Exhaustion

Publication date: 2026-07-20

Last updated on: 2026-07-20

Assigner: Red Hat, Inc.

Description
A denial-of-service and resource exhaustion vulnerability exists within the `GDBus` component of GLib. The `gdbusauth` authentication mechanism fails to enforce proper length limitations on data lines read from a client. An unauthenticated local or remote attacker can exploit this lack of input validation by sending excessively long streams of data, causing the application to consume massive amounts of system memory and CPU, potentially leading to a crash or system hang.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-07-20
Last Modified
2026-07-20
Generated
2026-07-21
AI Q&A
2026-07-20
EPSS Evaluated
N/A
NVD
CVE-2026-15588
EUVD
EUVD-2026-45939

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
gnome glib From 2.0 (inc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-770 The product allocates a reusable resource or group of resources on behalf of an actor without imposing any intended restrictions on the size or number of resources that can be allocated.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-15588 is a denial-of-service and resource exhaustion vulnerability in the GDBus component of GLib. The gdbusauth authentication mechanism fails to enforce proper length limitations on data lines read from a client. An attacker can send excessively long streams of data to cause the application to consume massive system memory and CPU, potentially crashing or hanging the system.

Detection Guidance

Monitor for unusual memory or CPU usage spikes in processes using GLib or GDBus. Check system logs for applications linked to glib2 for errors related to gdbusauth or SASL line buffering. Use tools like top, htop, or ps to identify abnormal resource consumption by GLib-based services.

Impact Analysis

This vulnerability can impact you by causing system slowdowns, crashes, or hangs due to excessive memory and CPU consumption. It may disrupt services relying on GLib, especially on Linux systems where GDBus is commonly used for inter-process communication.

Compliance Impact

This vulnerability could indirectly impact compliance with GDPR or HIPAA by causing system instability or crashes due to resource exhaustion. Unauthorized DoS attacks may disrupt services handling sensitive data, potentially leading to data processing interruptions or breaches of availability requirements under these regulations.

Mitigation Strategies

Apply patches or updates from your Linux distribution that address the glib2 library vulnerability. Restrict network access to services using GDBusServer if possible. Monitor affected systems for signs of exploitation and consider temporarily disabling non-essential services until patched.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-15588. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart