The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:61766 advisory.

    * glib: buffer over-read in glib/gvariant-serialiser.c via gvs_tuple_is_normal() (CVE-2026-58010)

    * glib: out-of-bounds read in glib/gdatetime.c:g_date_time_get_ymd via invalid GDateTime (CVE-2026-58011)

    * glib: buffer over-read in g_regex_replace() via glib/gregex.c:string_append() and g_utf8_next_char()     (CVE-2026-58012)

    * glib: buffer over-read in glib/giochannel.c via g_io_channel_read_line_backend (CVE-2026-58013)

    * glib: off-by-one error in glib/gkeyfile.c via g_key_file_get_locale_string_list (CVE-2026-58014)

    * glib: path traversal in glib/gio/gdbusauthmechanismsha1.c via keyring_lookup_entry and     mechanism_client_data_receive (CVE-2026-58015)

    * GDBusServer: glib2: GDBusServer pre-authentication DoS via unbounded SASL line buffering     (CVE-2026-15588)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-617660 advisory.

    - Fix CVE-2026-15588: limit D-Bus auth line read length
    - Fix CVE-2026-58010: off-by-one in GVariant tuple offset checking
    - Fix CVE-2026-58011: range validation in g_date_time_add_full()
    - Fix CVE-2026-58012: buffer overflow in gregex case changing substitutions
    - Fix CVE-2026-58013: buffer over-read in GIOChannel with long terminators
    - Fix CVE-2026-58015: validate D-Bus DBUS_COOKIE_SHA1 cookie context

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1730:14 advisory.

    * glib: buffer over-read in glib/gvariant-serialiser.c via gvs_tuple_is_normal() (CVE-2026-58010)
      * glib: out-of-bounds read in glib/gdatetime.c:g_date_time_get_ymd via invalid GDateTime     (CVE-2026-58011)
      * glib: buffer over-read in g_regex_replace() via glib/gregex.c:string_append() and g_utf8_next_char()     (CVE-2026-58012)
      * glib: buffer over-read in glib/giochannel.c via g_io_channel_read_line_backend (CVE-2026-58013)
      * glib: off-by-one error in glib/gkeyfile.c via g_key_file_get_locale_string_list (CVE-2026-58014)
      * glib: path traversal in glib/gio/gdbusauthmechanismsha1.c via keyring_lookup_entry and     mechanism_client_data_receive (CVE-2026-58015)
      * GDBusServer: glib2: GDBusServer pre-authentication DoS via unbounded SASL line buffering     (CVE-2026-15588)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:65767 advisory.

    GLib provides the core application building blocks for libraries and applications written in C. It     provides the core object system used in GNOME, the main loop implementation, and a large set of utility     functions for strings and common data structures.

    Security Fix(es):

    * glib: buffer over-read in glib/gvariant-serialiser.c via gvs_tuple_is_normal() (CVE-2026-58010)

    * glib: out-of-bounds read in glib/gdatetime.c:g_date_time_get_ymd via invalid GDateTime (CVE-2026-58011)

    * glib: buffer over-read in g_regex_replace() via glib/gregex.c:string_append() and g_utf8_next_char()     (CVE-2026-58012)

    * glib: buffer over-read in glib/giochannel.c via g_io_channel_read_line_backend (CVE-2026-58013)

    * glib: off-by-one error in glib/gkeyfile.c via g_key_file_get_locale_string_list (CVE-2026-58014)

    * glib: path traversal in glib/gio/gdbusauthmechanismsha1.c via keyring_lookup_entry and     mechanism_client_data_receive (CVE-2026-58015)

    * GDBusServer: glib2: GDBusServer pre-authentication DoS via unbounded SASL line buffering     (CVE-2026-15588)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:65762 advisory.

    GLib provides the core application building blocks for libraries and applications written in C. It     provides the core object system used in GNOME, the main loop implementation, and a large set of utility     functions for strings and common data structures.

    Security Fix(es):

    * glib: buffer over-read in glib/gvariant-serialiser.c via gvs_tuple_is_normal() (CVE-2026-58010)

    * glib: out-of-bounds read in glib/gdatetime.c:g_date_time_get_ymd via invalid GDateTime (CVE-2026-58011)

    * glib: buffer over-read in g_regex_replace() via glib/gregex.c:string_append() and g_utf8_next_char()     (CVE-2026-58012)

    * glib: buffer over-read in glib/giochannel.c via g_io_channel_read_line_backend (CVE-2026-58013)

    * glib: off-by-one error in glib/gkeyfile.c via g_key_file_get_locale_string_list (CVE-2026-58014)

    * glib: path traversal in glib/gio/gdbusauthmechanismsha1.c via keyring_lookup_entry and     mechanism_client_data_receive (CVE-2026-58015)

    * GDBusServer: glib2: GDBusServer pre-authentication DoS via unbounded SASL line buffering     (CVE-2026-15588)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1787154316 advisory.

  - A denial-of-service and resource exhaustion vulnerability exists within the `GDBus` component of GLib. The     `gdbusauth` authentication mechanism fails to enforce proper length limitations on data lines read from a     client. An unauthenticated local or remote attacker can exploit this lack of input validation by sending     excessively long streams of data, causing the application to consume massive amounts of system memory and     CPU, potentially leading to a crash or system hang. (CVE-2026-15588)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1788000309 advisory.

  - A denial-of-service and resource exhaustion vulnerability exists within the `GDBus` component of GLib. The     `gdbusauth` authentication mechanism fails to enforce proper length limitations on data lines read from a     client. An unauthenticated local or remote attacker can exploit this lack of input validation by sending     excessively long streams of data, causing the application to consume massive amounts of system memory and     CPU, potentially leading to a crash or system hang. (CVE-2026-15588)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
342150	RockyLinux 8 : glib2 (RLSA-2026:61766)	Nessus	Rocky Linux Local Security Checks	2026/9/1	2026/9/1	high
342252	Oracle Linux 8 : ELSA-2026-61766-0: / glib2 (ELSA-2026-617660)	Nessus	Oracle Linux Local Security Checks	2026/9/1	2026/9/1	high
342270	MiracleLinux 8 : glib2-2.56.4-177.el8_10 (AXSA:2026-1730:14)	Nessus	Miracle Linux Local Security Checks	2026/9/2	2026/9/2	high
343980	RHEL 10 : glib2 (RHSA-2026:65767)	Nessus	Red Hat Local Security Checks	2026/9/9	2026/9/9	high
343984	RHEL 8 : glib2 (RHSA-2026:65762)	Nessus	Red Hat Local Security Checks	2026/9/9	2026/9/9	high
361309	Rocky Linux 9.6 [TuxCare] Security Update: glib2 / glib2-devel / glib2-doc / glib2-static / glib2-tests (ALMALINUX9.6:CLSA-2026:1787154316)	Nessus	Rocky Linux Local Security Checks	2026/10/1	2026/10/1	medium
361441	AlmaLinux 9.2 [TuxCare] Security Update: glib2 / glib2-devel / glib2-doc / glib2-static / glib2-tests (ALMALINUX9.2:CLSA-2026:1788000309)	Nessus	Alma Linux Local Security Checks	2026/10/1	2026/10/1	medium

检测

插件搜索

high

high

high

high

high

medium

medium