Analysis and contextual insights are available on OpenCVE Cloud.
Vendor Workaround
To mitigate this vulnerability, implement input validation to sanitize untrusted D-Bus introspection XML, specifically rejecting malformed structures such as <node> elements improperly nested within <method>, <signal>, <property> or <arg> elements before calling g_dbus_node_info_new_for_xml(). Alternatively, restricting the application to only process XML input from trusted, authenticated sources will completely neutralize this issue.
Tracking
Sign in to view the affected projects.
| Source | ID | Title |
|---|---|---|
Ubuntu USN |
USN-8794-1 | GLib vulnerabilities |
Thu, 29 Oct 2026 14:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Redhat cert-manager Operator
Redhat codeready Linux Builder Redhat codeready Linux Builder Eus Redhat enterprise Linux Aus Redhat enterprise Linux Els Redhat enterprise Linux Server Tus Redhat enterprise Linux Update Services For Sap Solutions Redhat insights-proxy Redhat update Infrastructure |
|
| CPEs | cpe:2.3:a:redhat:cert-manager_operator:*:*:*:*:*:openshift:*:* cpe:2.3:a:redhat:cert-manager_operator:1.17.0:*:*:*:*:openshift:*:* cpe:2.3:a:redhat:cert-manager_operator:1.20.0:*:*:*:*:openshift:*:* cpe:2.3:a:redhat:codeready_linux_builder:10.0:*:*:*:*:*:*:* cpe:2.3:a:redhat:codeready_linux_builder:8.0:*:*:*:*:*:*:* cpe:2.3:a:redhat:codeready_linux_builder:9.0:*:*:*:*:*:*:* cpe:2.3:a:redhat:codeready_linux_builder_eus:10.0:*:*:*:*:*:*:* cpe:2.3:a:redhat:codeready_linux_builder_eus:9.6:*:*:*:*:*:*:* cpe:2.3:a:redhat:discovery:2.0:*:*:*:*:*:*:* cpe:2.3:a:redhat:insights-proxy:1.5.0:*:*:*:*:*:*:* cpe:2.3:a:redhat:openshift_ai:*:*:*:*:*:*:*:* cpe:2.3:a:redhat:update_infrastructure:*:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_aus:8.4:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_aus:8.6:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_els:7.0:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_eus:10.0:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_eus:8.4:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_eus:8.6:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_eus:9.6:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_server_tus:8.8:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_update_services_for_sap_solutions:8.8:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_update_services_for_sap_solutions:9.2:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_update_services_for_sap_solutions:9.4:*:*:*:*:*:*:* |
|
| Vendors & Products |
Redhat cert-manager Operator
Redhat codeready Linux Builder Redhat codeready Linux Builder Eus Redhat enterprise Linux Aus Redhat enterprise Linux Els Redhat enterprise Linux Server Tus Redhat enterprise Linux Update Services For Sap Solutions Redhat insights-proxy Redhat update Infrastructure |
Wed, 14 Oct 2026 19:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
Wed, 14 Oct 2026 03:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| CPEs | cpe:/a:redhat:cert_manager:1.17::el9 cpe:/a:redhat:cert_manager:1.18::el9 |
|
| References |
|
Fri, 02 Oct 2026 02:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| CPEs | cpe:/a:redhat:openshift_ai:3.4::el9 | |
| References |
|
Thu, 01 Oct 2026 16:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| CPEs | cpe:/a:redhat:openshift_ai:3.2::el9 | |
| References |
|
Wed, 30 Sep 2026 16:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Redhat openshift Ai
|
|
| CPEs | cpe:/a:redhat:openshift_ai:3.0::el9 | |
| Vendors & Products |
Redhat openshift Ai
|
|
| References |
|
Tue, 29 Sep 2026 01:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
Mon, 28 Sep 2026 14:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
Mon, 28 Sep 2026 10:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
Mon, 28 Sep 2026 08:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Redhat cert Manager
|
|
| CPEs | cpe:/a:redhat:cert_manager:1.20::el9 | |
| Vendors & Products |
Redhat cert Manager
|
|
| References |
|
Tue, 25 Aug 2026 09:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
Tue, 11 Aug 2026 09:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Redhat insights Proxy
|
|
| CPEs | cpe:/a:redhat:insights_proxy:1.5::el9 | |
| Vendors & Products |
Redhat insights Proxy
|
|
| References |
|
Fri, 07 Aug 2026 02:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Redhat enterprise Linux Eus
Redhat rhel Els Redhat rhel Eus |
|
| CPEs | cpe:/a:redhat:rhel_eus:9.6::appstream cpe:/a:redhat:rhel_eus:9.6::crb cpe:/o:redhat:enterprise_linux_eus:10.0 cpe:/o:redhat:rhel_els:7 cpe:/o:redhat:rhel_eus:9.6::baseos |
|
| Vendors & Products |
Redhat enterprise Linux Eus
Redhat rhel Els Redhat rhel Eus |
|
| References |
|
Thu, 06 Aug 2026 22:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Redhat rhel Aus
Redhat rhel E4s Redhat rhel Eus Long Life Redhat rhel Tus |
|
| CPEs | cpe:/a:redhat:rhel_e4s:9.2::appstream cpe:/a:redhat:rhel_e4s:9.4::appstream cpe:/o:redhat:rhel_aus:8.4::baseos cpe:/o:redhat:rhel_aus:8.6::baseos cpe:/o:redhat:rhel_e4s:8.8::baseos cpe:/o:redhat:rhel_e4s:9.2::baseos cpe:/o:redhat:rhel_e4s:9.4::baseos cpe:/o:redhat:rhel_eus_long_life:8.4::baseos cpe:/o:redhat:rhel_eus_long_life:8.6::baseos cpe:/o:redhat:rhel_tus:8.8::baseos |
|
| Vendors & Products |
Redhat rhel Aus
Redhat rhel E4s Redhat rhel Eus Long Life Redhat rhel Tus |
|
| References |
|
Mon, 03 Aug 2026 04:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| CPEs | ||
| References |
|
Tue, 28 Jul 2026 17:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | A flaw was found in GLib. A state confusion issue exists in g_dbus_node_info_new_for_xml() in the gio/gdbusintrospection.c file when processing malformed D-Bus introspection XML, specifically with a <node> element nested within other elements like <method>, <signal>, <property> or <arg>. This issue can cause an unsigned integer overflow and lead to an out-of-bounds read, resulting in a denial of service. | A flaw was found in GLib. A state confusion issue exists in g_dbus_node_info_new_for_xml() in the gio/gdbusintrospection.c file when processing malformed D-Bus introspection XML, specifically with a `node` element nested within other elements like `method`, `signal`, `property` or `arg`. This issue can cause an unsigned integer overflow and lead to an out-of-bounds read, resulting in a denial of service. |
Mon, 27 Jul 2026 17:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Redhat discovery
|
|
| CPEs | cpe:/a:redhat:discovery:2::el9 | |
| Vendors & Products |
Redhat discovery
|
|
| References |
|
Thu, 23 Jul 2026 14:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Redhat rhui
|
|
| CPEs | cpe:/a:redhat:rhui:5::el9 | |
| Vendors & Products |
Redhat rhui
|
|
| References |
|
Tue, 21 Jul 2026 03:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| CPEs | cpe:/a:redhat:enterprise_linux:9::appstream cpe:/a:redhat:enterprise_linux:9::crb cpe:/o:redhat:enterprise_linux:9::baseos |
|
| References |
|
Mon, 20 Jul 2026 22:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| CPEs | cpe:/o:redhat:enterprise_linux:10.2 | |
| References |
|
Mon, 20 Jul 2026 18:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| CPEs | cpe:/a:redhat:enterprise_linux:8::crb cpe:/o:redhat:enterprise_linux:8::baseos |
|
| References |
|
Wed, 01 Jul 2026 10:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Gnome
Gnome glib Redhat hardened Images |
|
| Vendors & Products |
Gnome
Gnome glib Redhat hardened Images |
Tue, 30 Jun 2026 14:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
ssvc
|
Tue, 30 Jun 2026 13:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | A flaw was found in GLib. A state confusion issue exists in g_dbus_node_info_new_for_xml() in the gio/gdbusintrospection.c file when processing malformed D-Bus introspection XML, specifically with a <node> element nested within other elements like <method>, <signal>, <property> or <arg>. This issue can cause an unsigned integer overflow and lead to an out-of-bounds read, resulting in a denial of service. | |
| Title | Glib: integer underflow in gio/gdbusintrospection.c via "g_dbus_node_info_new_for_xml" | |
| First Time appeared |
Redhat
Redhat enterprise Linux Redhat hummingbird |
|
| Weaknesses | CWE-191 | |
| CPEs | cpe:/a:redhat:hummingbird:1 cpe:/o:redhat:enterprise_linux:10 cpe:/o:redhat:enterprise_linux:6 cpe:/o:redhat:enterprise_linux:7 cpe:/o:redhat:enterprise_linux:8 cpe:/o:redhat:enterprise_linux:9 |
|
| Vendors & Products |
Redhat
Redhat enterprise Linux Redhat hummingbird |
|
| References |
| |
| Metrics |
cvssV3_1
|
Subscriptions
Status: PUBLISHED
Assigner: redhat
Published:
Updated: 2026-10-14T19:10:38.064Z
Reserved: 2026-06-26T20:59:47.856Z
Link: CVE-2026-58016
Updated: 2026-06-30T13:58:11.595Z
Status : Analyzed
Published: 2026-06-30T13:19:17.840
Modified: 2026-10-29T14:16:54.210
Link: CVE-2026-58016
No data.
OpenCVE Enrichment
Updated: 2026-08-04T08:15:06Z
Ubuntu USN