CVE-2026-58015 MEDIUM
← Quay lại danh sách
Dịch vụ / phần mềm liên quan:
Chưa phân loại — không khớp danh sách dịch vụ/phần mềm đang theo dõi (xem/thêm ở
internal/cve/categories.go), hoặc NVD chưa cung cấp đủ dữ liệu vendor/sản phẩm cho CVE này.
Mô tả
A flaw was found in GLib. The D-Bus client-side implementation of the DBUS_COOKIE_SHA1 SASL authentication mechanism does not validate the cookie_context parameter received from the server. A malicious D-Bus server can supply a cookie_context containing path traversal sequences, causing the client to read an arbitrary file and exfiltrate sensitive data by verifying guessed file contents against a generated hash.
Chi tiết
| Trạng thái | Modified |
| Điểm CVSS | 5.9 (v3.1) |
| Vector CVSS | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N |
| Ngày công bố | 20:19 30/06/2026 |
| Ngày cập nhật | 15:16 28/09/2026 |
| Nguồn dữ liệu | nvd |
CWE
Sản phẩm bị ảnh hưởng
| Vendor | Sản phẩm | Khoảng phiên bản |
|---|---|---|
| gnome | glib | ≤ 2.88.1 |
| redhat | enterprise_linux | - |
Tài liệu tham khảo
- [secalert@redhat.com] https://access.redhat.com/errata/RHSA-2026:49512
- [secalert@redhat.com] https://access.redhat.com/errata/RHSA-2026:55440
- [secalert@redhat.com] https://access.redhat.com/errata/RHSA-2026:57015
- [secalert@redhat.com] https://access.redhat.com/errata/RHSA-2026:58981
- [secalert@redhat.com] https://access.redhat.com/errata/RHSA-2026:61766
- [secalert@redhat.com] https://access.redhat.com/errata/RHSA-2026:61783
- [secalert@redhat.com] https://access.redhat.com/errata/RHSA-2026:63135
- [secalert@redhat.com] https://access.redhat.com/errata/RHSA-2026:63138
- [secalert@redhat.com] https://access.redhat.com/errata/RHSA-2026:63140
- [secalert@redhat.com] https://access.redhat.com/errata/RHSA-2026:65762
- [secalert@redhat.com] https://access.redhat.com/errata/RHSA-2026:65763
- [secalert@redhat.com] https://access.redhat.com/errata/RHSA-2026:65767
- [secalert@redhat.com] https://access.redhat.com/errata/RHSA-2026:65768
- [secalert@redhat.com] https://access.redhat.com/errata/RHSA-2026:65769
- [secalert@redhat.com] https://access.redhat.com/errata/RHSA-2026:65770
- [secalert@redhat.com] https://access.redhat.com/errata/RHSA-2026:65771
- [secalert@redhat.com] https://access.redhat.com/errata/RHSA-2026:65773
- [secalert@redhat.com] https://access.redhat.com/errata/RHSA-2026:66018
- [secalert@redhat.com] https://access.redhat.com/errata/RHSA-2026:66357
- [secalert@redhat.com] https://access.redhat.com/errata/RHSA-2026:72394
- [secalert@redhat.com] https://access.redhat.com/errata/RHSA-2026:72395
- [secalert@redhat.com] https://access.redhat.com/security/cve/CVE-2026-58015 (Third Party Advisory)
- [secalert@redhat.com] https://bugzilla.redhat.com/show_bug.cgi?id=2492256 (Issue Tracking, Third Party Advisory)
- [secalert@redhat.com] https://gitlab.gnome.org/GNOME/glib/-/issues/3931 (Exploit, Issue Tracking, Vendor Advisory)
Lịch sử thay đổi
| Thời gian | Loại | Trường | Giá trị cũ | Giá trị mới |
|---|---|---|---|---|
| 15:17 28/09/2026 | CREATED | cve | MEDIUM |