CVE-2026-2574

[Catálogo de CVE]

A flaw was found in glib-networking. A malicious Transport Layer Security (TLS) server can exploit an out-of-bounds read and invalid free vulnerability when a client using the OpenSSL backend connects. By advertising a specially crafted client-CA list, the server can trigger an issue where memory is accessed outside of its allocated buffer and subsequently freed incorrectly. This can lead to a denial-of-service and potentially disclose limited heap memory. glib-networking: glib-networking: Denial of Service and information disclosure via crafted TLS client-CA list This is a LOW impact vulnerability affecting the OpenSSL backend of the glib-networking library used by GNOME applications. When a client configured to use the OpenSSL backend connects to a malicious TLS server, improper handling of certificate authority data can result in an out-of-bounds heap read and an invalid free condition. Successful exploitation may cause application crashes (denial-of-service) and potentially limited heap memory disclosure. Red Hat products are not affected because the vulnerable OpenSSL backend is not built or shipped in supported configurations; therefore, the overall impact to Red Hat customers is considered Low. The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Gravidade

Medium · CVSS 5.4CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L

Published

Jan 1, 1, 12:00:00 AM UTC

Source

[NVD] · [CVE record]

{
  "package_releases": [
    {
      "name": "glib-networking",
      "status": "fixed",
      "release": "sid",
      "version": "2.90.0-2"
    },
    {
      "name": "glib-networking",
      "status": "fixed",
      "release": "forky",
      "version": "2.90.0-2"
    },
    {
      "name": "glib-networking",
      "status": "vulnerable",
      "release": "trixie",
      "version": "2.80.1-1"
    },
    {
      "name": "glib-networking",
      "status": "vulnerable",
      "release": "bookworm",
      "version": "2.74.0-4"
    }
  ],
  "fixed_versions": [
    {
      "bug": null,
      "name": "glib-networking",
      "type": "source",
      "origin": null,
      "release": "sid",
      "urgency": "unimportant",
      "fixed_version": "2.90.0-1"
    },
    {
      "bug": null,
      "name": "glib-networking",
      "type": "source",
      "origin": null,
      "release": "forky",
      "urgency": "unimportant",
      "fixed_version": "2.90.0-1"
    },
    {
      "bug": null,
      "name": "glib-networking",
      "type": "source",
      "origin": null,
      "release": "trixie",
      "urgency": "unimportant",
      "fixed_version": ""
    },
    {
      "bug": null,
      "name": "glib-networking",
      "type": "source",
      "origin": null,
      "release": "bookworm",
      "urgency": "unimportant",
      "fixed_version": ""
    }
  ],
  "distribution_packages": [
    {
      "name": "glib-networking",
      "fixed_version": "not yet fixed",
      "applicability_unknown": true
    }
  ]
}