Gdbusserver: glib2: gdbusserver pre-authentication dos via unbounded sasl line buffering

Summary

A denial-of-service and resource exhaustion vulnerability exists within the `GDBus` component of GLib. The `gdbusauth` authentication mechanism fails to enforce proper length limitations on data lines read from a client. An unauthenticated local or remote attacker can exploit this lack of input validation by sending excessively long streams of data, causing the application to consume massive amounts of system memory and CPU, potentially leading to a crash or system hang.

Timeline

1. Jul 20, 2026, 12:12 PM UTCCVE published
2. Jul 20, 2026, 1:49 PM UTCCISA SSVC assessment

   Exploitation: poc · Automatable: no · Technical impact: partial

3. Oct 30, 2026, 7:42 AM UTCRecord last updated

Affected versions

• glib2

  Version range not reported

• glib2

  Version range not reported

• glib2

  Version range not reported

• glib2

  Version range not reported

• glib2

  Version range not reported

• glib2

  Version range not reported

• glib2

  Version range not reported

• glib2

  Version range not reported

• glib2

  Version range not reported

• glib2

  Version range not reported

• glib2

  Version range not reported

• glib2

  Version range not reported

• glib2

  Version range not reported

• glib2

  Version range not reported

• cert-manager/jetstack-cert-manager-acmesolver-rhel9

  Version range not reported

• cert-manager/jetstack-cert-manager-rhel9

  Version range not reported

• cert-manager/cert-manager-operator-rhel9

  Version range not reported

• cert-manager/cert-manager-istio-csr-rhel9

  Version range not reported

• cert-manager/cert-manager-operator-bundle

  Version range not reported

• cert-manager/jetstack-cert-manager-acmesolver-rhel9

  Version range not reported

• cert-manager/jetstack-cert-manager-rhel9

  Version range not reported

• cert-manager/cert-manager-istio-csr-rhel9

  Version range not reported

• cert-manager/cert-manager-operator-rhel9

  Version range not reported

• cert-manager/cert-manager-operator-bundle

  Version range not reported

• cert-manager/cert-manager-operator-rhel9

  Version range not reported

• cert-manager/jetstack-cert-manager-acmesolver-rhel9

  Version range not reported

• cert-manager/jetstack-cert-manager-rhel9

  Version range not reported

• cert-manager/cert-manager-istio-csr-rhel9

  Version range not reported

• cert-manager/jetstack-cert-manager-rhel9

  Version range not reported

• cert-manager/cert-manager-istio-csr-rhel9

  Version range not reported

• cert-manager/cert-manager-operator-rhel9

  Version range not reported

• cert-manager/jetstack-cert-manager-acmesolver-rhel9

  Version range not reported

• cert-manager/cert-manager-trust-manager-rhel9

  Version range not reported

• rhaiis/model-opt-cuda-rhel9

  Version range not reported

• rhaiis/vllm-cuda-rhel9

  Version range not reported

• rhaiis/vllm-rocm-rhel9

  Version range not reported

• rhaii/vllm-rocm-rhel9

  Version range not reported

• rhaii/vllm-gaudi-rhel9

  Version range not reported

• rhaii/model-opt-cuda-rhel9

  Version range not reported

• rhaii/vllm-cuda-rhel9

  Version range not reported

• rhaii/vllm-spyre-rhel9

  Version range not reported

• rhaii/vllm-cpu-rhel9

  Version range not reported

• discovery/discovery-server-rhel9

  Version range not reported

• discovery/discovery-ui-rhel9

  Version range not reported

• rhelai3/disk-image-cuda-rhel9

  Version range not reported

• rhelai3/bootc-aws-cuda-rhel9

  Version range not reported

• rhelai3/bootc-azure-cuda-rhel9

  Version range not reported

• rhelai3/bootc-azure-rocm-rhel9

  Version range not reported

• rhelai3/bootc-cuda-rhel9

  Version range not reported

• rhelai3/bootc-gcp-cuda-rhel9

  Version range not reported

• rhelai3/bootc-rocm-rhel9

  Version range not reported

• glib2-main

  Version range not reported

• rhai/base-image-rocm-rhel9

  Version range not reported

• rhai/base-image-tpu-rhel9

  Version range not reported

• rhai/base-image-cpu-rhel9

  Version range not reported

• rhai/base-image-spyre-rhel9

  Version range not reported

• rhai/base-image-cuda-rhel9

  Version range not reported

• rhai/base-image-tpu-rhel9

  Version range not reported

• rhai/base-image-rocm-rhel9

  Version range not reported

• rhai/base-image-cpu-rhel9

  Version range not reported

• rhai/base-image-spyre-rhel9

  Version range not reported

• rhai/base-image-cuda-rhel9

  Version range not reported

• rhai/base-image-neuron-rhel9

  Version range not reported

• rhai/base-image-tpu-rhel9

  Version range not reported

• rhai/base-image-gaudi-rhel9

  Version range not reported

• rhai/base-image-cpu-rhel9

  Version range not reported

• rhai/base-image-spyre-rhel9

  Version range not reported

• rhai/base-image-cuda-13.0-rhel9

  Version range not reported

• rhai/base-image-cuda-12.9-rhel9

  Version range not reported

• rhai/base-image-rocm-7.1-rhel9

  Version range not reported

• rhai/base-image-rocm-6.4-rhel9

  Version range not reported

• rhai/base-image-gaudi-rhel9

  Version range not reported

• rhai/base-image-cpu-rhel9

  Version range not reported

• rhai/base-image-neuron-rhel9

  Version range not reported

• rhai/base-image-rubin-rhel9

  Version range not reported

• rhai/base-image-cuda-13.0-rhel9

  Version range not reported

• rhai/base-image-tpu-rhel9

  Version range not reported

• rhai/base-image-rocm-7.14-rhel9

  Version range not reported

• rhai/base-image-spyre-rhel9

  Version range not reported

• rhai/base-image-cuda-12.9-rhel9

  Version range not reported

• rhui5/cds-kubernetes-tp-rhel9

  Version range not reported

• rhui5/installer-tp-rhel9

  Version range not reported

• rhui5/rhua-tp-rhel9

  Version range not reported

• rhui5/cds-kubernetes-rhel9

  Version range not reported

• rhui5/cds-rhel9

  Version range not reported

• rhui5/haproxy-rhel9

  Version range not reported

• rhui5/installer-rhel9

  Version range not reported

• rhui5/rhua-rhel9

  Version range not reported

• mingw-glib2

  Version range not reported

• glib2

  Version range not reported

• mingw-glib2

  Version range not reported

• mingw-glib2

  Version range not reported

• openshift/ose-rhel-coreos-8

  Version range not reported

• openshift/ose-rhel-coreos-9

  Version range not reported

• openshift/ose-rhel-coreos-9

  Version range not reported

References 25