Attestkeep
Dil: Türkçe
Kayıt ol

Zafiyetler / CVE-2026-58016

kritik

CVE-2026-58016

glib: integer underflow in gio/gdbusintrospection.c via "g_dbus_node_info_new_for_xml"

Yayın Değişiklik CWE 191
En geç 24 Eki 2026, 07:11 UTC tarihinden beri Trivy database'indeO derlemeden önce ne zaman girdiği kayıtlı değil.

Kaynağa göre önem derecesi

NVD9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Red Hat7.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Julia9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

Trivy'nin kendi etiketi CRITICAL. Kritik diyenler: NVD, Julia, Photon OS. Daha düşük diyenler: Red Hat (yüksek), AlmaLinux (yüksek), Amazon (yüksek), Oracle (yüksek), Rocky Linux (yüksek), Azure Linux (orta), Ubuntu (orta).

Açıklama

A flaw was found in GLib. A state confusion issue exists in g_dbus_node_info_new_for_xml() in the gio/gdbusintrospection.c file when processing malformed D-Bus introspection XML, specifically with a `node` element nested within other elements like `method`, `signal`, `property` or `arg`. This issue can cause an unsigned integer overflow and lead to an out-of-bounds read, resulting in a denial of service.

Etkilenen paketler ve düzeltilmiş sürümler

KaynakPaketDüzeltildiği sürüm
julia::Julia Ecosystem Security AdvisoriesGlib_jll2.88.3+0
Photon OS 5.0glib, glib-devel, glib-schemas2.89.2-2.ph5
alma 10glib2, glib2-devel, glib2-doc ve 2 tane daha2.80.4-12.el10_2.14
alma 8glib2, glib2-devel, glib2-doc ve 7 tane daha2.56.4-170.el8_10 ve 1 tane daha
alma 9glib2, glib2-devel, glib2-doc ve 2 tane daha2.68.4-19.el9_8.2
amazon linux 2glib2, glib2-debuginfo, glib2-devel ve 4 tane daha2.56.1-9.amzn2.0.14
amazon linux 2023glib2, glib2-debuginfo, glib2-debugsource ve 6 tane daha2.82.2-770.amzn2023
Azure Linux 3.0glib0:2.78.6-10.azl3
debian 11glib2.0düzeltme belirtilmemiş
debian 12glib2.0düzeltme belirtilmemiş
debian 13glib2.02.84.4-3~deb13u4
debian 14glib2.02.88.3-2
60 kaynaktaki 215 kaydın hepsini göster
KaynakPaketDüzeltildiği sürüm
julia::Julia Ecosystem Security AdvisoriesGlib_jll2.88.3+0
Photon OS 5.0glib2.89.2-2.ph5
Photon OS 5.0glib-devel2.89.2-2.ph5
Photon OS 5.0glib-schemas2.89.2-2.ph5
alma 10glib22.80.4-12.el10_2.14
alma 10glib2-devel2.80.4-12.el10_2.14
alma 10glib2-doc2.80.4-12.el10_2.14
alma 10glib2-static2.80.4-12.el10_2.14
alma 10glib2-tests2.80.4-12.el10_2.14
alma 8glib22.56.4-170.el8_10
alma 8glib2-devel2.56.4-170.el8_10
alma 8glib2-doc2.56.4-170.el8_10
alma 8glib2-fam2.56.4-170.el8_10
alma 8glib2-static2.56.4-170.el8_10
alma 8glib2-tests2.56.4-170.el8_10
alma 8mingw32-glib22.70.1-9.el8_10
alma 8mingw32-glib2-static2.70.1-9.el8_10
alma 8mingw64-glib22.70.1-9.el8_10
alma 8mingw64-glib2-static2.70.1-9.el8_10
alma 9glib22.68.4-19.el9_8.2
alma 9glib2-devel2.68.4-19.el9_8.2
alma 9glib2-doc2.68.4-19.el9_8.2
alma 9glib2-static2.68.4-19.el9_8.2
alma 9glib2-tests2.68.4-19.el9_8.2
amazon linux 2glib22.56.1-9.amzn2.0.14
amazon linux 2glib2-debuginfo2.56.1-9.amzn2.0.14
amazon linux 2glib2-devel2.56.1-9.amzn2.0.14
amazon linux 2glib2-doc2.56.1-9.amzn2.0.14
amazon linux 2glib2-fam2.56.1-9.amzn2.0.14
amazon linux 2glib2-static2.56.1-9.amzn2.0.14
amazon linux 2glib2-tests2.56.1-9.amzn2.0.14
amazon linux 2023glib22.82.2-770.amzn2023
amazon linux 2023glib2-debuginfo2.82.2-770.amzn2023
amazon linux 2023glib2-debugsource2.82.2-770.amzn2023
amazon linux 2023glib2-devel2.82.2-770.amzn2023
amazon linux 2023glib2-devel-debuginfo2.82.2-770.amzn2023
amazon linux 2023glib2-doc2.82.2-770.amzn2023
amazon linux 2023glib2-static2.82.2-770.amzn2023
amazon linux 2023glib2-tests2.82.2-770.amzn2023
amazon linux 2023glib2-tests-debuginfo2.82.2-770.amzn2023
Azure Linux 3.0glib0:2.78.6-10.azl3
debian 11glib2.0düzeltme belirtilmemiş
debian 12glib2.0düzeltme belirtilmemiş
debian 13glib2.02.84.4-3~deb13u4
debian 14glib2.02.88.3-2
echoglib2.02.84.4-3~deb13u3+e2
minimosglib2.88.1-r0
Oracle Linux 7glib22.56.1-9.0.7.el7_9
Oracle Linux 7glib2-devel2.56.1-9.0.7.el7_9
Oracle Linux 7glib2-doc2.56.1-9.0.7.el7_9
Oracle Linux 7glib2-fam2.56.1-9.0.7.el7_9
Oracle Linux 7glib2-static2.56.1-9.0.7.el7_9
Oracle Linux 7glib2-tests2.56.1-9.0.7.el7_9
Oracle Linux 8glib22.56.4-170.el8_10
Oracle Linux 8glib2-devel2.56.4-170.el8_10
Oracle Linux 8glib2-doc2.56.4-170.el8_10
Oracle Linux 8glib2-fam2.56.4-170.el8_10
Oracle Linux 8glib2-static2.56.4-170.el8_10
Oracle Linux 8glib2-tests2.56.4-170.el8_10
Oracle Linux 8mingw32-glib22.70.1-9.el8_10
Oracle Linux 8mingw32-glib2-static2.70.1-9.el8_10
Oracle Linux 8mingw64-glib22.70.1-9.el8_10
Oracle Linux 8mingw64-glib2-static2.70.1-9.el8_10
Oracle Linux 9glib22.68.4-19.el9_8.2
Oracle Linux 9glib2-devel2.68.4-19.el9_8.2
Oracle Linux 9glib2-doc2.68.4-19.el9_8.2
Oracle Linux 9glib2-static2.68.4-19.el9_8.2
Oracle Linux 9glib2-tests2.68.4-19.el9_8.2
rapidfort almarf-glib2-devel2.86.5-11.rf
rapidfort almarf-glib2-doc2.86.5-11.rf
rapidfort almarf-glib2-static2.86.5-11.rf
rapidfort almarf-glib2-tests2.86.5-11.rf
rapidfort alma 10glib20:2.80.4-12.el10_2.14
rapidfort alma 10glib2-devel2.80.4-12.el10_2.14
rapidfort alma 10glib2-doc2.80.4-12.el10_2.14
rapidfort alma 10glib2-static2.80.4-12.el10_2.14
rapidfort alma 10glib2-tests2.80.4-12.el10_2.14
rapidfort alma 10mingw32-glib2düzeltme belirtilmemiş
rapidfort alma 10mingw32-glib2-staticdüzeltme belirtilmemiş
rapidfort alma 10mingw64-glib2düzeltme belirtilmemiş
rapidfort alma 10mingw64-glib2-staticdüzeltme belirtilmemiş
rapidfort alma 9glib20:2.68.4-19.el9_8.2
rapidfort alma 9glib2-devel2.68.4-19.el9_8.2
rapidfort alma 9glib2-doc2.68.4-19.el9_8.2
rapidfort alma 9glib2-tests2.68.4-19.el9_8.2
rapidfort alma 9mingw32-glib2düzeltme belirtilmemiş
rapidfort alma 9mingw32-glib2-staticdüzeltme belirtilmemiş
rapidfort alma 9mingw64-glib2düzeltme belirtilmemiş
rapidfort alma 9mingw64-glib2-staticdüzeltme belirtilmemiş
rapidfort alpine 3.20glib2.88.1-r0
rapidfort alpine 3.21glib2.88.1-r0
rapidfort alpine 3.22glib2.88.1-r0
rapidfort alpine 3.23glib2.88.1-r0
rapidfort alpine 3.24glib2.88.1-r0
rapidfort amazon linuxrf-glib2-devel2.86.5-10.rfal
rapidfort amazon linuxrf-glib2-doc2.86.5-10.rfal
rapidfort amazon linuxrf-glib2-static2.86.5-10.rfal
rapidfort amazon linux 2023glib20:2.82.2-770.amzn2023
rapidfort amazon linux 2023glib2-devel2.82.2-770.amzn2023
rapidfort amazon linux 2023glib2-doc2.82.2-770.amzn2023
rapidfort amazon linux 2023glib2-static2.82.2-770.amzn2023
rapidfort amazon linux 2023glib2-tests2.82.2-770.amzn2023
rapidfort amazon linux 2023rf-glib20:2.82.2-770.amzn2023
rapidfort amazon linux 2023rf-glib2-devel2.82.2-770.amzn2023
rapidfort amazon linux 2023rf-glib2-doc2.82.2-770.amzn2023
rapidfort amazon linux 2023rf-glib2-static2.82.2-770.amzn2023
rapidfort debianrf-glib2.00:2.84.4-19rfubu
rapidfort debian 12glib2.00:2.84.4-3~deb13u4, 0:2.88.3-2
rapidfort debian 12rf-glib2.00:2.84.4-3~deb13u4, 0:2.88.3-2
rapidfort debian 13glib2.00:2.84.4-3~deb13u4, 0:2.88.3-2
rapidfort debian 13rf-glib2.00:2.84.4-3~deb13u4, 0:2.88.3-2
rapidfort fedora 41glib20:2.82.5-2.fc41
rapidfort fedora 41rf-glib20:2.82.5-2.fc41
rapidfort fedora 42glib20:2.84.4-2.fc42
rapidfort fedora 42rf-glib20:2.84.4-2.fc42
rapidfort fedora 43glib1:1.2.10-77.fc43
rapidfort fedora 43glib-devel1:1.2.10-77.fc43
rapidfort fedora 43glib20:2.86.5-2.fc43
rapidfort fedora 43glib2-devel2.86.5-2.fc43
rapidfort fedora 43glib2-doc2.86.5-2.fc43
rapidfort fedora 43glib2-static2.86.5-2.fc43
rapidfort fedora 43glib2-tests2.86.5-2.fc43
rapidfort fedora 43mingw-glib22.86.5-2.fc43
rapidfort fedora 43mingw32-glib22.86.5-2.fc43
rapidfort fedora 43mingw32-glib2-static2.86.5-2.fc43
rapidfort fedora 43mingw64-glib22.86.5-2.fc43
rapidfort fedora 43mingw64-glib2-static2.86.5-2.fc43
rapidfort fedora 43rf-glib20:2.86.5-2.fc43
rapidfort fedora 43rf-glib2-devel2.86.5-2.fc43
rapidfort fedora 43rf-glib2-doc2.86.5-2.fc43
rapidfort fedora 43rf-glib2-static2.86.5-2.fc43
rapidfort fedora 43rf-glib2-tests2.86.5-2.fc43
rapidfort Oracle Linuxrf-glib22.86.5-11.rf
rapidfort Oracle Linuxrf-glib2-devel2.86.5-11.rf, 2.86.5-12.rf, 2.86.5-13.rf
rapidfort Oracle Linuxrf-glib2-doc2.86.5-11.rf, 2.86.5-12.rf, 2.86.5-13.rf
rapidfort Oracle Linuxrf-glib2-static2.86.5-11.rf, 2.86.5-12.rf, 2.86.5-13.rf
rapidfort Oracle Linuxrf-glib2-tests2.86.5-11.rf, 2.86.5-12.rf, 2.86.5-13.rf
rapidfort Oracle Linux 10glib20:2.80.4-12.el10_2.14
rapidfort Oracle Linux 10glib2-devel0:2.80.4-12.el10_2.14
rapidfort Oracle Linux 10glib2-doc0:2.80.4-12.el10_2.14
rapidfort Oracle Linux 10glib2-static0:2.80.4-12.el10_2.14
rapidfort Oracle Linux 10glib2-tests0:2.80.4-12.el10_2.14
rapidfort Oracle Linux 10mingw32-glib2düzeltme belirtilmemiş
rapidfort Oracle Linux 10mingw32-glib2-staticdüzeltme belirtilmemiş
rapidfort Oracle Linux 10mingw64-glib2düzeltme belirtilmemiş
rapidfort Oracle Linux 10mingw64-glib2-staticdüzeltme belirtilmemiş
rapidfort Oracle Linux 9glib20:2.68.4-19.el9_8.2
rapidfort Oracle Linux 9glib2-devel0:2.68.4-19.el9_8.2
rapidfort Oracle Linux 9glib2-doc0:2.68.4-19.el9_8.2
rapidfort Oracle Linux 9glib2-static0:2.68.4-19.el9_8.2
rapidfort Oracle Linux 9glib2-tests0:2.68.4-19.el9_8.2
rapidfort Oracle Linux 9mingw32-glib2düzeltme belirtilmemiş
rapidfort Oracle Linux 9mingw32-glib2-staticdüzeltme belirtilmemiş
rapidfort Oracle Linux 9mingw64-glib2düzeltme belirtilmemiş
rapidfort Oracle Linux 9mingw64-glib2-staticdüzeltme belirtilmemiş
rapidfort Red Hatrf-glib2-devel2.86.5-11.rf
rapidfort Red Hatrf-glib2-doc2.86.5-11.rf
rapidfort Red Hatrf-glib2-static2.86.5-11.rf
rapidfort Red Hatrf-glib2-tests2.86.5-11.rf
rapidfort Red Hat 10mingw32-glib2düzeltme belirtilmemiş
rapidfort Red Hat 10mingw32-glib2-staticdüzeltme belirtilmemiş
rapidfort Red Hat 10mingw64-glib2düzeltme belirtilmemiş
rapidfort Red Hat 10mingw64-glib2-staticdüzeltme belirtilmemiş
rapidfort Red Hat 9mingw32-glib2düzeltme belirtilmemiş
rapidfort Red Hat 9mingw32-glib2-staticdüzeltme belirtilmemiş
rapidfort Red Hat 9mingw64-glib2düzeltme belirtilmemiş
rapidfort Red Hat 9mingw64-glib2-staticdüzeltme belirtilmemiş
rapidfort rockyrf-glib22.86.5-11.rf
rapidfort rockyrf-glib2-devel2.86.5-11.rf, 2.86.5-12.rf, 2.86.5-13.rf
rapidfort rockyrf-glib2-doc2.86.5-11.rf, 2.86.5-12.rf, 2.86.5-13.rf
rapidfort rockyrf-glib2-static2.86.5-11.rf, 2.86.5-12.rf, 2.86.5-13.rf
rapidfort rockyrf-glib2-tests2.86.5-11.rf, 2.86.5-12.rf, 2.86.5-13.rf
rapidfort rocky 10mingw-glib2düzeltme belirtilmemiş
rapidfort rocky 9glib20:2.68.4-19.el9_8.2
rapidfort rocky 9glib2-devel0:2.68.4-19.el9_8.2
rapidfort rocky 9glib2-tests0:2.68.4-19.el9_8.2
rapidfort rocky 9mingw-glib2düzeltme belirtilmemiş
rapidfort ubuntuglib2.00:2.84.4-17rfubu
rapidfort ubunturf-glib2.00:2.84.4-17rfubu
rapidfort ubuntu 20.04glib2.00:2.80.0-6ubuntu3.9
rapidfort ubuntu 20.04rf-glib2.00:2.80.0-6ubuntu3.9
rapidfort ubuntu 22.04glib2.00:2.80.0-6ubuntu3.9
rapidfort ubuntu 22.04rf-glib2.00:2.80.0-6ubuntu3.9
rapidfort ubuntu 24.04glib2.00:2.80.0-6ubuntu3.9
rapidfort ubuntu 24.04rf-glib2.00:2.80.0-6ubuntu3.9
Red Hatglib2düzeltme belirtilmemiş
Red Hatglib2-develdüzeltme belirtilmemiş
Red Hatglib2-docdüzeltme belirtilmemiş
Red Hatglib2-staticdüzeltme belirtilmemiş
Red Hatmingw-glib2düzeltme belirtilmemiş
Red Hatmingw32-glib2düzeltme belirtilmemiş
Red Hatmingw32-glib2-staticdüzeltme belirtilmemiş
Red Hatmingw64-glib2düzeltme belirtilmemiş
Red Hatmingw64-glib2-staticdüzeltme belirtilmemiş
rocky 10glib20.0.0
rocky 8glib22.56.4-170.el8_10
rocky 8glib2-devel2.56.4-170.el8_10
rocky 8glib2-fam2.56.4-170.el8_10
rocky 8glib2-tests2.56.4-170.el8_10
rocky 9glib22.68.4-19.el9_8.2
seal debianglib2.02.74.6-2+deb12u7+sp999
seal debianseal-glib2.02.74.6-2+deb12u7+sp999
seal Red Hat 6glib22.28.8-11.el6_10+sp999
seal Red Hat 6seal-glib22.28.8-11.el6_10+sp999
seal Red Hat 7glib22.56.1-7.el7+sp999
seal Red Hat 7seal-glib22.56.1-7.el7+sp999
seal Red Hat 8glib22.56.4-165.el8_10+sp999
seal Red Hat 8seal-glib22.56.4-165.el8_10+sp999
seal Red Hat 9glib22.68.4-14.el9_4.1+sp999
seal Red Hat 9seal-glib22.68.4-14.el9_4.1+sp999
ubuntu 18.04-ESMglib2.02.56.4-0ubuntu0.18.04.9+esm6
ubuntu 20.04-ESMglib2.02.64.6-1~ubuntu20.04.9+esm2
ubuntu 22.04glib2.02.72.4-0ubuntu2.10
ubuntu 24.04glib2.02.80.0-6ubuntu3.9
ubuntu 26.04glib2.02.88.0-1ubuntu0.1

Referanslar

57 referansın hepsi

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.