IP-DB.com
Türkçe English Deutsch Español
Anmelden API-Schlüssel holen
7.5Hoch

CVE-2026-58016Glib: integer underflow in gio/gdbusintrospection.c via "g_dbus_node_info_new_for_xml"

GNOME GLib; Red Hat Red Hat Enterprise Linux 10; Red Hat Red Hat Enterprise Linux 10.0 Extended Update Support; Red Hat Red Hat Enterprise Linux 7 Extended Lif… Veröffentlicht: (vor 4 Monaten)

Beschreibung

A flaw was found in GLib. A state confusion issue exists in g_dbus_node_info_new_for_xml() in the gio/gdbusintrospection.c file when processing malformed D-Bus introspection XML, specifically with a `node` element nested within other elements like `method`, `signal`, `property` or `arg`. This issue can cause an unsigned integer overflow and lead to an out-of-bounds read, resulting in a denial of service.

Schwachstellentyp (CWE): CWE-191

Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.

Betroffene Produkte und Versionen

HerstellerProduktVersionen
cert manager 1.17 —
cert manager 1.18 —
cert manager 1.20 —
discovery 2 —
enterprise linux 8 —
enterprise linux 9 —
GNOME GLib < 2.89.0
insights proxy 1.5 —
openshift ai 3.0 —
openshift ai 3.2 —
openshift ai 3.4 —
redhat cert-manager operator 1.18.0 – < 1.18.2
Red Hat Cert Manager support for Red Hat OpenShift release 1.17 all versions
Red Hat Cert Manager support for Red Hat OpenShift release 1.18 all versions
Red Hat Cert Manager support for Red Hat OpenShift release 1.20 all versions
redhat codeready linux builder 8.0
redhat codeready linux builder eus 9.6
redhat discovery 2.0
redhat enterprise linux 6.0
redhat enterprise linux aus 8.4
redhat enterprise linux els 7.0
redhat enterprise linux eus 8.4
redhat enterprise linux server tus 8.8
redhat enterprise linux update services for sap solutions 8.8
redhat insights-proxy 1.5.0
redhat openshift ai 3.0 – < 3.0.3
Red Hat Red Hat Discovery 2 all versions
Red Hat Red Hat Enterprise Linux 10 all versions
Red Hat Red Hat Enterprise Linux 10.0 Extended Update Support all versions
Red Hat Red Hat Enterprise Linux 6 all versions
Red Hat Red Hat Enterprise Linux 7 Extended Lifecycle Support all versions
Red Hat Red Hat Enterprise Linux 8 all versions
Red Hat Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support all versions
Red Hat Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On all versions
Red Hat Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support all versions
Red Hat Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On all versions
Red Hat Red Hat Enterprise Linux 8.8 Telecommunications Update Service all versions
Red Hat Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions all versions
Red Hat Red Hat Enterprise Linux 9 all versions
Red Hat Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions all versions
Red Hat Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions all versions
Red Hat Red Hat Enterprise Linux 9.6 Extended Update Support all versions
Red Hat Red Hat Hardened Images —
Red Hat Red Hat Insights proxy 1.5 all versions
Red Hat Red Hat OpenShift AI 3.0 all versions
Red Hat Red Hat OpenShift AI 3.2 all versions
Red Hat Red Hat OpenShift AI 3.4 all versions
Red Hat Red Hat Update Infrastructure 5 all versions
redhat update infrastructure 5.0 – < 5.2
rhel aus 8.4 —
rhel aus 8.6 —
rhel e4s 8.8 —
rhel e4s 9.2 —
rhel e4s 9.4 —
rhel eus 9.6 —
rhel eus long life 8.4 —
rhel eus long life 8.6 —
rhel tus 8.8 —
rhui 5 —

Referenzen und Patches

CPE-Treffer (NVD) (30)
  • cpe:2.3:a:gnome:glib:*:*:*:*:*:*:*:* < 2.89.0
  • cpe:2.3:a:redhat:cert-manager_operator:*:*:*:*:*:openshift:*:* ≥ 1.18.0 < 1.18.2
  • cpe:2.3:a:redhat:cert-manager_operator:1.17.0:*:*:*:*:openshift:*:*
  • cpe:2.3:a:redhat:cert-manager_operator:1.20.0:*:*:*:*:openshift:*:*
  • cpe:2.3:a:redhat:codeready_linux_builder:8.0:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:codeready_linux_builder:9.0:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:codeready_linux_builder:10.0:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:codeready_linux_builder_eus:9.6:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:codeready_linux_builder_eus:10.0:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:discovery:2.0:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:insights-proxy:1.5.0:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:openshift_ai:*:*:*:*:*:*:*:* ≥ 3.0 < 3.0.3
  • cpe:2.3:a:redhat:openshift_ai:*:*:*:*:*:*:*:* ≥ 3.2 < 3.2.3
  • cpe:2.3:a:redhat:openshift_ai:*:*:*:*:*:*:*:* ≥ 3.4 < 3.4.3
  • cpe:2.3:a:redhat:update_infrastructure:*:*:*:*:*:*:*:* ≥ 5.0 < 5.2
  • cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*
  • cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*
  • cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*
  • cpe:2.3:o:redhat:enterprise_linux:10.0:*:*:*:*:*:*:*
  • cpe:2.3:o:redhat:enterprise_linux_aus:8.4:*:*:*:*:*:*:*
  • cpe:2.3:o:redhat:enterprise_linux_aus:8.6:*:*:*:*:*:*:*
  • cpe:2.3:o:redhat:enterprise_linux_els:7.0:*:*:*:*:*:*:*
  • cpe:2.3:o:redhat:enterprise_linux_eus:8.4:*:*:*:*:*:*:*
  • cpe:2.3:o:redhat:enterprise_linux_eus:8.6:*:*:*:*:*:*:*
  • cpe:2.3:o:redhat:enterprise_linux_eus:9.6:*:*:*:*:*:*:*
  • cpe:2.3:o:redhat:enterprise_linux_eus:10.0:*:*:*:*:*:*:*
  • cpe:2.3:o:redhat:enterprise_linux_server_tus:8.8:*:*:*:*:*:*:*
  • cpe:2.3:o:redhat:enterprise_linux_update_services_for_sap_solutions:8.8:*:*:*:*:*:*:*
  • cpe:2.3:o:redhat:enterprise_linux_update_services_for_sap_solutions:9.2:*:*:*:*:*:*:*
  • cpe:2.3:o:redhat:enterprise_linux_update_services_for_sap_solutions:9.4:*:*:*:*:*:*:*

Neue CVEs im selben Produkt — Red Hat Enterprise Linux

7.5Hoch
CVE-2026-123151

Gdb: gdb: stack buffer overflow in parse_tsv_definition via stale rs->buf tail

Red Hat Red Hat Enterprise Linux 10; Red Hat Red Hat Enterprise Linux 6; Red Hat Red Hat Enterprise Linux 7; Red Hat Red Hat Enterprise Linux 8

A flaw was found in the GNU debugger (GDB). When GDB connects to a remote debug target, a malicious target can cause GDB to overflow a buffer on the stack while parsing the target's replies. This can crash GDB or potentially allow the target to execute arbitr…

8.1Hoch
CVE-2026-121997

Gdb: gdbserver: heap buffer overflow in cmd_qtdpsrc via qtdpsrc declared/actual length mismatch

Red Hat Red Hat Enterprise Linux 10; Red Hat Red Hat Enterprise Linux 6; Red Hat Red Hat Enterprise Linux 7; Red Hat Red Hat Enterprise Linux 8

A heap buffer overflow in gdbserver's QTDPsrc packet handler allows an unauthenticated remote attacker to achieve native code execution in the gdbserver process. The vulnerability results from a mismatch between a packet's declared source length and the actua…

8.2Hoch
CVE-2026-121996

Gdb: gdbserver: heap disclosure and wild pointer in gdb_parse_agent_expr via untrusted agent-expression length

Red Hat Red Hat Enterprise Linux 10; Red Hat Red Hat Enterprise Linux 6; Red Hat Red Hat Enterprise Linux 7; Red Hat Red Hat Enterprise Linux 8

A length validation flaw in gdbserver's agent-expression parser allows an unauthenticated remote attacker to read uninitialized heap memory from the gdbserver process and cause a denial of service. Disclosed heap content includes addresses suitable for defeat…

7.5Hoch
CVE-2026-121995

Gdb: gdb: stack buffer overflow in parse_tracepoint_definition via stale rs->buf tail

Red Hat Red Hat Enterprise Linux 10; Red Hat Red Hat Enterprise Linux 6; Red Hat Red Hat Enterprise Linux 7; Red Hat Red Hat Enterprise Linux 8

A stack buffer overflow in the GDB client's tracepoint upload handler allows an attacker-controlled debug stub to corrupt stack memory automatically during connection setup. The overflow results from GDB reading beyond the current reply boundary into a stale …

8.8Hoch
CVE-2026-121994

Gdb: gdb: stack buffer overflow in fetch_register_using_p via unchecked p-reply length

Red Hat Red Hat Enterprise Linux 10; Red Hat Red Hat Enterprise Linux 6; Red Hat Red Hat Enterprise Linux 7; Red Hat Red Hat Enterprise Linux 8

A stack buffer overflow in the GDB client's remote protocol handler allows an attacker-controlled debug target to execute arbitrary code in the GDB process. The vulnerability exists in fetch_register_using_p, which decodes a stub's register reply into an allo…

6.5Mittel
CVE-2026-121259

Gst-plugins-bad: gst-plugins-bad: integer overflows and division by zero in jpeg 2000 decimator

Red Hat Red Hat Enterprise Linux 10; Red Hat Red Hat Enterprise Linux 7; Red Hat Red Hat Enterprise Linux 8; Red Hat Red Hat Enterprise Linux 9

A flaw was found in the GStreamer JPEG 2000 decimator in gst-plugins-bad. Crafted JPEG 2000 media can cause integer overflows or division by zero during tile processing. An application that processes the malicious media may crash, resulting in a denial of service.