The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:57015 advisory.

    GLib provides the core application building blocks for libraries and applications written in C. It     provides the core object system used in GNOME, the main loop implementation, and a large set of utility     functions for strings and common data structures.

    Security Fix(es):

    * glib: buffer over-read in glib/gvariant-serialiser.c via gvs_tuple_is_normal() (CVE-2026-58010)

    * glib: out-of-bounds read in glib/gdatetime.c:g_date_time_get_ymd via invalid GDateTime (CVE-2026-58011)

    * glib: buffer over-read in g_regex_replace() via glib/gregex.c:string_append() and g_utf8_next_char()     (CVE-2026-58012)

    * glib: buffer over-read in glib/giochannel.c via g_io_channel_read_line_backend (CVE-2026-58013)

    * glib: off-by-one error in glib/gkeyfile.c via g_key_file_get_locale_string_list (CVE-2026-58014)

    * glib: path traversal in glib/gio/gdbusauthmechanismsha1.c via keyring_lookup_entry and     mechanism_client_data_receive (CVE-2026-58015)

    * GDBusServer: glib2: GDBusServer pre-authentication DoS via unbounded SASL line buffering     (CVE-2026-15588)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-57015 advisory.

    - Fix CVE-2026-15588: limit D-Bus auth line read length
    - Fix CVE-2026-58011: range validation in g_date_time_add_full()
    - Fix CVE-2026-58012: buffer overflow in gregex.c with G_REGEX_RAW
    - Fix CVE-2026-58010: off-by-one in GVariant tuple offset checking
    - Fix CVE-2026-58015: validate D-Bus DBUS_COOKIE_SHA1 cookie context
    - Fix CVE-2026-58014: heap under-read in g_key_file_get_locale_string_list
    - Fix CVE-2026-58013: GIOChannel memcmp buffer over-read
    - Fix CVE-2026-58016: D-Bus introspection XML node nesting validation

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:61766 advisory.

    * glib: buffer over-read in glib/gvariant-serialiser.c via gvs_tuple_is_normal() (CVE-2026-58010)

    * glib: out-of-bounds read in glib/gdatetime.c:g_date_time_get_ymd via invalid GDateTime (CVE-2026-58011)

    * glib: buffer over-read in g_regex_replace() via glib/gregex.c:string_append() and g_utf8_next_char()     (CVE-2026-58012)

    * glib: buffer over-read in glib/giochannel.c via g_io_channel_read_line_backend (CVE-2026-58013)

    * glib: off-by-one error in glib/gkeyfile.c via g_key_file_get_locale_string_list (CVE-2026-58014)

    * glib: path traversal in glib/gio/gdbusauthmechanismsha1.c via keyring_lookup_entry and     mechanism_client_data_receive (CVE-2026-58015)

    * GDBusServer: glib2: GDBusServer pre-authentication DoS via unbounded SASL line buffering     (CVE-2026-15588)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-617660 advisory.

    - Fix CVE-2026-15588: limit D-Bus auth line read length
    - Fix CVE-2026-58010: off-by-one in GVariant tuple offset checking
    - Fix CVE-2026-58011: range validation in g_date_time_add_full()
    - Fix CVE-2026-58012: buffer overflow in gregex case changing substitutions
    - Fix CVE-2026-58013: buffer over-read in GIOChannel with long terminators
    - Fix CVE-2026-58015: validate D-Bus DBUS_COOKIE_SHA1 cookie context

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1730:14 advisory.

    * glib: buffer over-read in glib/gvariant-serialiser.c via gvs_tuple_is_normal() (CVE-2026-58010)
      * glib: out-of-bounds read in glib/gdatetime.c:g_date_time_get_ymd via invalid GDateTime     (CVE-2026-58011)
      * glib: buffer over-read in g_regex_replace() via glib/gregex.c:string_append() and g_utf8_next_char()     (CVE-2026-58012)
      * glib: buffer over-read in glib/giochannel.c via g_io_channel_read_line_backend (CVE-2026-58013)
      * glib: off-by-one error in glib/gkeyfile.c via g_key_file_get_locale_string_list (CVE-2026-58014)
      * glib: path traversal in glib/gio/gdbusauthmechanismsha1.c via keyring_lookup_entry and     mechanism_client_data_receive (CVE-2026-58015)
      * GDBusServer: glib2: GDBusServer pre-authentication DoS via unbounded SASL line buffering     (CVE-2026-15588)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:65767 advisory.

    GLib provides the core application building blocks for libraries and applications written in C. It     provides the core object system used in GNOME, the main loop implementation, and a large set of utility     functions for strings and common data structures.

    Security Fix(es):

    * glib: buffer over-read in glib/gvariant-serialiser.c via gvs_tuple_is_normal() (CVE-2026-58010)

    * glib: out-of-bounds read in glib/gdatetime.c:g_date_time_get_ymd via invalid GDateTime (CVE-2026-58011)

    * glib: buffer over-read in g_regex_replace() via glib/gregex.c:string_append() and g_utf8_next_char()     (CVE-2026-58012)

    * glib: buffer over-read in glib/giochannel.c via g_io_channel_read_line_backend (CVE-2026-58013)

    * glib: off-by-one error in glib/gkeyfile.c via g_key_file_get_locale_string_list (CVE-2026-58014)

    * glib: path traversal in glib/gio/gdbusauthmechanismsha1.c via keyring_lookup_entry and     mechanism_client_data_receive (CVE-2026-58015)

    * GDBusServer: glib2: GDBusServer pre-authentication DoS via unbounded SASL line buffering     (CVE-2026-15588)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:65762 advisory.

    GLib provides the core application building blocks for libraries and applications written in C. It     provides the core object system used in GNOME, the main loop implementation, and a large set of utility     functions for strings and common data structures.

    Security Fix(es):

    * glib: buffer over-read in glib/gvariant-serialiser.c via gvs_tuple_is_normal() (CVE-2026-58010)

    * glib: out-of-bounds read in glib/gdatetime.c:g_date_time_get_ymd via invalid GDateTime (CVE-2026-58011)

    * glib: buffer over-read in g_regex_replace() via glib/gregex.c:string_append() and g_utf8_next_char()     (CVE-2026-58012)

    * glib: buffer over-read in glib/giochannel.c via g_io_channel_read_line_backend (CVE-2026-58013)

    * glib: off-by-one error in glib/gkeyfile.c via g_key_file_get_locale_string_list (CVE-2026-58014)

    * glib: path traversal in glib/gio/gdbusauthmechanismsha1.c via keyring_lookup_entry and     mechanism_client_data_receive (CVE-2026-58015)

    * GDBusServer: glib2: GDBusServer pre-authentication DoS via unbounded SASL line buffering     (CVE-2026-15588)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-657730 advisory.

    - Backport fix for CVE-2026-15588 [Orabug: 39995948]
    - Backport fix for CVE-2026-58010 [Orabug: 39995948]
    - Backport fix for CVE-2026-58011 [Orabug: 39995948]
    - Backport fix for CVE-2026-58012 [Orabug: 39995948]
    - Backport fix for CVE-2026-58013 [Orabug: 39995948]
    - Backport fix for CVE-2026-58014 [Orabug: 39995948]
    - Backport fix for CVE-2026-58015 [Orabug: 39995948]
    - Fixes CVE-2026-58016 [Orabug: 39844471]
    - Fixes CVE-2025-14078 gvariant parser buffer underflow [Orabug: 39418716]
    - Fixes CVE-2025-13601  g_escape_uri_string() overflow [Orabug: 38909821]

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The CentOS Linux 8.4 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.4:CLSA-2026:1783079573 advisory.

  - A flaw was found in GLib. An off-by-one error can occur in the g_key_file_get_locale_string_list function     in the gkeyfile.c file when loading a key file with an empty value. This flaw can cause an out-of-bounds     access of 1 byte or a denial of service when the out-of-bounds access crosses a page boundary.
    (CVE-2026-58014)

  - A flaw was found in GLib. The D-Bus client-side implementation of the DBUS_COOKIE_SHA1 SASL authentication     mechanism does not validate the cookie_context parameter received from the server. A malicious D-Bus     server can supply a cookie_context containing path traversal sequences, causing the client to read an     arbitrary file and exfiltrate sensitive data by verifying guessed file contents against a generated hash.
    (CVE-2026-58015)

  - A flaw was found in GLib. A state confusion issue exists in g_dbus_node_info_new_for_xml() in the     gio/gdbusintrospection.c file when processing malformed D-Bus introspection XML, specifically with a     `node` element nested within other elements like `method`, `signal`, `property` or `arg`. This issue can     cause an unsigned integer overflow and lead to an out-of-bounds read, resulting in a denial of service.
    (CVE-2026-58016)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1783345900 advisory.

  - A flaw was found in GLib. An off-by-one error can occur in the g_key_file_get_locale_string_list function     in the gkeyfile.c file when loading a key file with an empty value. This flaw can cause an out-of-bounds     access of 1 byte or a denial of service when the out-of-bounds access crosses a page boundary.
    (CVE-2026-58014)

  - A flaw was found in GLib. The D-Bus client-side implementation of the DBUS_COOKIE_SHA1 SASL authentication     mechanism does not validate the cookie_context parameter received from the server. A malicious D-Bus     server can supply a cookie_context containing path traversal sequences, causing the client to read an     arbitrary file and exfiltrate sensitive data by verifying guessed file contents against a generated hash.
    (CVE-2026-58015)

  - A flaw was found in GLib. A state confusion issue exists in g_dbus_node_info_new_for_xml() in the     gio/gdbusintrospection.c file when processing malformed D-Bus introspection XML, specifically with a     `node` element nested within other elements like `method`, `signal`, `property` or `arg`. This issue can     cause an unsigned integer overflow and lead to an out-of-bounds read, resulting in a denial of service.
    (CVE-2026-58016)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-2026_55440 advisory.

    * glib: buffer over-read in glib/gvariant-serialiser.c via gvs_tuple_is_normal() (CVE-2026-58010)

    * glib: out-of-bounds read in glib/gdatetime.c:g_date_time_get_ymd via invalid GDateTime (CVE-2026-58011)

    * glib: buffer over-read in g_regex_replace() via glib/gregex.c:string_append() and g_utf8_next_char()     (CVE-2026-58012)

    * glib: buffer over-read in glib/giochannel.c via g_io_channel_read_line_backend (CVE-2026-58013)

    * glib: off-by-one error in glib/gkeyfile.c via g_key_file_get_locale_string_list (CVE-2026-58014)

    * glib: path traversal in glib/gio/gdbusauthmechanismsha1.c via keyring_lookup_entry and     mechanism_client_data_receive (CVE-2026-58015)

    * GDBusServer: glib2: GDBusServer pre-authentication DoS via unbounded SASL line buffering     (CVE-2026-15588)

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
338118	RHEL 10 : glib2 (RHSA-2026:57015)	Nessus	Red Hat Local Security Checks	2026/8/19	2026/8/19	high
338222	Oracle Linux 10 : glib2 (ELSA-2026-57015)	Nessus	Oracle Linux Local Security Checks	2026/8/20	2026/8/20	high
342150	RockyLinux 8 : glib2 (RLSA-2026:61766)	Nessus	Rocky Linux Local Security Checks	2026/9/1	2026/9/1	high
342252	Oracle Linux 8 : ELSA-2026-61766-0: / glib2 (ELSA-2026-617660)	Nessus	Oracle Linux Local Security Checks	2026/9/1	2026/9/1	high
342270	MiracleLinux 8 : glib2-2.56.4-177.el8_10 (AXSA:2026-1730:14)	Nessus	Miracle Linux Local Security Checks	2026/9/2	2026/9/2	high
343980	RHEL 10 : glib2 (RHSA-2026:65767)	Nessus	Red Hat Local Security Checks	2026/9/9	2026/9/9	high
343984	RHEL 8 : glib2 (RHSA-2026:65762)	Nessus	Red Hat Local Security Checks	2026/9/9	2026/9/9	high
351157	Oracle Linux 7 : ELSA-2026-65773-0: / glib2 (ELSA-2026-657730)	Nessus	Oracle Linux Local Security Checks	2026/9/29	2026/9/29	high
352814	CentOS Linux 8.4 [TuxCare] Security Update: glib2 / glib2-devel / glib2-doc / glib2-fam / glib2-static / etc Multiple Vulnerabilities (CENTOS8.4:CLSA-2026:1783079573)	Nessus	CentOS Local Security Checks	2026/9/30	2026/9/30	critical
352910	AlmaLinux 9.6 [TuxCare] Security Update: glib2 / glib2-devel / glib2-doc / glib2-static / glib2-tests Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1783345900)	Nessus	Alma Linux Local Security Checks	2026/9/30	2026/9/30	critical
355725	Rocky Linux 9 [CIQ] Security Update: glib2 / glib2-debuginfo / glib2-debugsource / glib2-devel / etc Multiple Vulnerabilities (crlsa-2026_55440)	Nessus	Rocky Linux Local Security Checks	2026/10/1	2026/10/1	high

检测

插件搜索

high

high

high

high

high

high

high

high

critical

critical

high