目标达成感谢每一位支持者 — 我们达成了 100% 目标！

目标: 1000 元 · 已筹: 1359 元

100%

请我们喝杯咖啡

CVE-2026-58016— GNOME GLib 数字错误漏洞

一分钟漏洞结论

影响对象

GNOME GLib

利用判断

尚无明确在野利用证据，仍需结合暴露面评估

建议动作

优先检查厂商安全公告和参考链接中的修复版本；无法立即升级时，限制受影响服务暴露并加强监测。

GNOME glib是GNOME基金会开源的一个通用的、可移植的实用程序库。提供了许多有用的数据类型、宏、类型转换、字符串实用程序、文件实用程序、主循环抽象等。 GLib 2.88.1之前版本存在数字错误漏洞，该漏洞源于在g_dbus_node_info_new_for_xml()函数处理格式错误的D-Bus introspection XML时存在状态混淆问题，具体为<node>元素嵌套在<method>、<signal>、<property>或<arg>等其他元素内，可能导致无符号整数溢出并引发越界读

CVSS 7.5 · High EPSS 0.56% · P47 更新于 2026-11-11

可能的 ATT&CK 技术 1 AI

T1190 · Exploit Public-Facing Application

影响版本矩阵 63

厂商	产品	版本范围	状态
GNOME	GLib	`< 2.89.0`	affected
Red Hat	Cert Manager support for Red Hat OpenShift release 1.17	`1791371080< *`	unaffected
		`1791371069< *`	unaffected
		`1791788287< *`	unaffected
		`1791378395< *`	unaffected
		`1791970484< *`	unaffected
Red Hat	Cert Manager support for Red Hat OpenShift release 1.18	`1791459707< *`	unaffected
		`1791459711< *`	unaffected
		`1791459759< *`	unaffected
		`1789029076< *`	unaffected
		`1791966259< *`	unaffected
Red Hat	Cert Manager support for Red Hat OpenShift release 1.20	`1790223279< *`	unaffected
		`1790223719< *`	unaffected
		`1790272426< *`	unaffected
		`1790589998< *`	unaffected
		`1790589912< *`	unaffected
		`1790589914< *`	unaffected
		`1790589855< *`	unaffected
		`1790598593< *`	unaffected
Red Hat	Red Hat Discovery 2	`1784821670< *`	unaffected
		`1784821750< *`	unaffected
Red Hat	Red Hat Enterprise Linux 10	`0:2.80.4-12.el10_2.14< *`	unaffected
		`0:2.89.2-1.el10< *`	unaffected
Red Hat	Red Hat Enterprise Linux 10.0 Extended Update Support	`0:2.80.4-4.el10_0.10< *`	unaffected
Red Hat	Red Hat Enterprise Linux 6	`全部`	affected
Red Hat	Red Hat Enterprise Linux 7 Extended Lifecycle Support	`0:2.56.1-13.el7_9< *`	unaffected
Red Hat	Red Hat Enterprise Linux 8	`0:2.70.1-9.el8_10< *`	unaffected
		`0:2.56.4-170.el8_10< *`	unaffected
Red Hat	Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support	`0:2.56.4-10.el8_4.6< *`	unaffected
Red Hat	Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On	`0:2.56.4-10.el8_4.6< *`	unaffected
Red Hat	Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support	`0:2.56.4-158.el8_6.6< *`	unaffected
Red Hat	Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On	`0:2.56.4-158.el8_6.6< *`	unaffected
Red Hat	Red Hat Enterprise Linux 8.8 Telecommunications Update Service	`0:2.56.4-165.el8_8.1< *`	unaffected
Red Hat	Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions	`0:2.56.4-165.el8_8.1< *`	unaffected
Red Hat	Red Hat Enterprise Linux 9	`0:2.68.4-19.el9_8.2< *`	unaffected
		`0:2.68.4-19.el9_8.2< *`	unaffected
		`全部`	affected
Red Hat	Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions	`0:2.68.4-7.el9_2.6< *`	unaffected
Red Hat	Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions	`0:2.68.4-14.el9_4.7< *`	unaffected
Red Hat	Red Hat Enterprise Linux 9.6 Extended Update Support	`0:2.68.4-16.el9_6.6< *`	unaffected
Red Hat	Red Hat Hardened Images	`全部`	unaffected
Red Hat	Red Hat Insights proxy 1.5	`1786433656< *`	unaffected
Red Hat	Red Hat OpenShift AI (RHOAI)	`全部`	unaffected
Red Hat	Red Hat OpenShift AI 3.0	`1790276886< *`	unaffected
		`1790276884< *`	unaffected
		`1790277045< *`	unaffected
		`1790276889< *`	unaffected
		`1790276974< *`	unaffected
Red Hat	Red Hat OpenShift AI 3.2	`1790703497< *`	unaffected
		`1790703506< *`	unaffected
		`1790703590< *`	unaffected
		`1790703568< *`	unaffected
		`1790703586< *`	unaffected
		`1790703494< *`	unaffected
Red Hat	Red Hat OpenShift AI 3.4	`1790703542< *`	unaffected
Red Hat	Red Hat Update Infrastructure 5	`1784794818< *`	unaffected
		`1784794778< *`	unaffected
		`1784795112< *`	unaffected
		`1784794289< *`	unaffected
		`1784795076< *`	unaffected
		`1787241211< *`	unaffected
		`1787135742< *`	unaffected
		`1787241260< *`	unaffected

获取后续新漏洞提醒登录后订阅

一、漏洞 CVE-2026-58016 基础信息

漏洞信息

对漏洞内容有疑问？看看神龙的深度分析是否有帮助！

查看神龙十问 ↗

尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。

Vulnerability Title

Glib: integer underflow in gio/gdbusintrospection.c via "g_dbus_node_info_new_for_xml"

来源: CVE Program / CVE List V5

Vulnerability Description

A flaw was found in GLib. A state confusion issue exists in g_dbus_node_info_new_for_xml() in the gio/gdbusintrospection.c file when processing malformed D-Bus introspection XML, specifically with a `node` element nested within other elements like `method`, `signal`, `property` or `arg`. This issue can cause an unsigned integer overflow and lead to an out-of-bounds read, resulting in a denial of service.

来源: CVE Program / CVE List V5

CVSS Information

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

来源: CVE Program / CVE List V5

Vulnerability Type

整数下溢(超界折返)

来源: CVE Program / CVE List V5

Vulnerability Title

GNOME GLib 数字错误漏洞

来源: 中国国家信息安全漏洞库 CNNVD

Vulnerability Description

来源: 中国国家信息安全漏洞库 CNNVD

CVSS Information

N/A

来源: 中国国家信息安全漏洞库 CNNVD

Vulnerability Type

N/A

来源: 中国国家信息安全漏洞库 CNNVD

受影响产品

厂商	产品	影响版本	CPE
GNOME	GLib	0 ~ 2.89.0	-
Red Hat	Red Hat Enterprise Linux 10	0:2.80.4-12.el10_2.14 ~ *	`cpe:/o:redhat:enterprise_linux:10.2`
Red Hat	Red Hat Enterprise Linux 10	0:2.89.2-1.el10 ~ *	`cpe:/o:redhat:enterprise_linux:10.3`
Red Hat	Red Hat Enterprise Linux 10.0 Extended Update Support	0:2.80.4-4.el10_0.10 ~ *	`cpe:/o:redhat:enterprise_linux_eus:10.0`
Red Hat	Red Hat Enterprise Linux 7 Extended Lifecycle Support	0:2.56.1-13.el7_9 ~ *	`cpe:/o:redhat:rhel_els:7`
Red Hat	Red Hat Enterprise Linux 8	0:2.70.1-9.el8_10 ~ *	`cpe:/a:redhat:enterprise_linux:8::crb`
Red Hat	Red Hat Enterprise Linux 8	0:2.56.4-170.el8_10 ~ *	`cpe:/a:redhat:enterprise_linux:8::crb`
Red Hat	Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support	0:2.56.4-10.el8_4.6 ~ *	`cpe:/o:redhat:rhel_aus:8.4::baseos`
Red Hat	Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On	0:2.56.4-10.el8_4.6 ~ *	`cpe:/o:redhat:rhel_aus:8.4::baseos`
Red Hat	Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support	0:2.56.4-158.el8_6.6 ~ *	`cpe:/o:redhat:rhel_aus:8.6::baseos`
Red Hat	Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On	0:2.56.4-158.el8_6.6 ~ *	`cpe:/o:redhat:rhel_aus:8.6::baseos`
Red Hat	Red Hat Enterprise Linux 8.8 Telecommunications Update Service	0:2.56.4-165.el8_8.1 ~ *	`cpe:/o:redhat:rhel_e4s:8.8::baseos`
Red Hat	Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions	0:2.56.4-165.el8_8.1 ~ *	`cpe:/o:redhat:rhel_e4s:8.8::baseos`
Red Hat	Red Hat Enterprise Linux 9	0:2.68.4-19.el9_8.2 ~ *	`cpe:/a:redhat:enterprise_linux:9::appstream`
Red Hat	Red Hat Enterprise Linux 9	0:2.68.4-19.el9_8.2 ~ *	`cpe:/a:redhat:enterprise_linux:9::appstream`
Red Hat	Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions	0:2.68.4-7.el9_2.6 ~ *	`cpe:/a:redhat:rhel_e4s:9.2::appstream`
Red Hat	Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions	0:2.68.4-14.el9_4.7 ~ *	`cpe:/a:redhat:rhel_e4s:9.4::appstream`
Red Hat	Red Hat Enterprise Linux 9.6 Extended Update Support	0:2.68.4-16.el9_6.6 ~ *	`cpe:/a:redhat:rhel_eus:9.6::appstream`
Red Hat	Cert Manager support for Red Hat OpenShift release 1.17	1791371080 ~ *	`cpe:/a:redhat:cert_manager:1.17::el9`
Red Hat	Cert Manager support for Red Hat OpenShift release 1.17	1791371069 ~ *	`cpe:/a:redhat:cert_manager:1.17::el9`
Red Hat	Cert Manager support for Red Hat OpenShift release 1.17	1791788287 ~ *	`cpe:/a:redhat:cert_manager:1.17::el9`
Red Hat	Cert Manager support for Red Hat OpenShift release 1.17	1791378395 ~ *	`cpe:/a:redhat:cert_manager:1.17::el9`
Red Hat	Cert Manager support for Red Hat OpenShift release 1.17	1791970484 ~ *	`cpe:/a:redhat:cert_manager:1.17::el9`
Red Hat	Cert Manager support for Red Hat OpenShift release 1.18	1791459707 ~ *	`cpe:/a:redhat:cert_manager:1.18::el9`
Red Hat	Cert Manager support for Red Hat OpenShift release 1.18	1791459711 ~ *	`cpe:/a:redhat:cert_manager:1.18::el9`
Red Hat	Cert Manager support for Red Hat OpenShift release 1.18	1791459759 ~ *	`cpe:/a:redhat:cert_manager:1.18::el9`
Red Hat	Cert Manager support for Red Hat OpenShift release 1.18	1789029076 ~ *	`cpe:/a:redhat:cert_manager:1.18::el9`
Red Hat	Cert Manager support for Red Hat OpenShift release 1.18	1791966259 ~ *	`cpe:/a:redhat:cert_manager:1.18::el9`
Red Hat	Cert Manager support for Red Hat OpenShift release 1.20	1790223279 ~ *	`cpe:/a:redhat:cert_manager:1.20::el9`
Red Hat	Cert Manager support for Red Hat OpenShift release 1.20	1790223719 ~ *	`cpe:/a:redhat:cert_manager:1.20::el9`

二、漏洞 CVE-2026-58016 的公开POC

#	POC 描述	源链接	神龙链接

AI 生成 POC 高级

未找到公开 POC。

登录以生成 AI POC

三、漏洞 CVE-2026-58016 的情报信息

请登录查看更多情报信息。

CVE-2026-58016 厂商安全公告 (46)

🔗 Page Not Found - Red Hat Customer Portal vdb-entry x_refsource_REDHAT
🔗 2492257 – (CVE-2026-58016) CVE-2026-58016 glib: integer underflow in gio/gdbusintrospection.c via "g_dbus_node_info_new_for_xml" 查看完整文章 issue-tracking x_refsource_REDHAT
🔗 RHSA-2026:44481 - Security Advisory - Red Hat Customer Portal vendor-advisory x_refsource_REDHAT
🔗 RHSA-2026:73961 - Security Advisory - Red Hat Customer Portal vendor-advisory x_refsource_REDHAT
🔗 RHSA-2026:72502 - Security Advisory - Red Hat Customer Portal vendor-advisory x_refsource_REDHAT
🔗 RHSA-2026:46836 - Security Advisory - Red Hat Customer Portal vendor-advisory x_refsource_REDHAT
🔗 RHSA-2026:42089 - Security Advisory - Red Hat Customer Portal vendor-advisory x_refsource_REDHAT
🔗 RHSA-2026:72476 - Security Advisory - Red Hat Customer Portal vendor-advisory x_refsource_REDHAT
🔗 RHSA-2026:73909 - Security Advisory - Red Hat Customer Portal vendor-advisory x_refsource_REDHAT
🔗 RHSA-2026:58981 - Security Advisory - Red Hat Customer Portal vendor-advisory x_refsource_REDHAT
🔗 RHSA-2026:53371 - Security Advisory - Red Hat Customer Portal vendor-advisory x_refsource_REDHAT
🔗 RHSA-2026:72395 - Security Advisory - Red Hat Customer Portal vendor-advisory x_refsource_REDHAT
🔗 RHSA-2026:42090 - Security Advisory - Red Hat Customer Portal vendor-advisory x_refsource_REDHAT
🔗 RHSA-2026:51182 - Security Advisory - Red Hat Customer Portal vendor-advisory x_refsource_REDHAT
🔗 RHSA-2026:74461 - Security Advisory - Red Hat Customer Portal vendor-advisory x_refsource_REDHAT
🔗 RHSA-2026:72399 - Security Advisory - Red Hat Customer Portal vendor-advisory x_refsource_REDHAT
🔗 RHSA-2026:74463 - Security Advisory - Red Hat Customer Portal vendor-advisory x_refsource_REDHAT
🔗 RHSA-2026:51185 - Security Advisory - Red Hat Customer Portal 查看完整文章 vendor-advisory x_refsource_REDHAT
🔗 RHSA-2026:51176 - Security Advisory - Red Hat Customer Portal 查看完整文章 vendor-advisory x_refsource_REDHAT
🔗 RHSA-2026:74458 - Security Advisory - Red Hat Customer Portal vendor-advisory x_refsource_REDHAT
🔗 RHSA-2026:72475 - Security Advisory - Red Hat Customer Portal vendor-advisory x_refsource_REDHAT
🔗 RHSA-2026:82322 - Security Advisory - Red Hat Customer Portal vendor-advisory x_refsource_REDHAT
🔗 RHSA-2026:82888 - Security Advisory - Red Hat Customer Portal vendor-advisory x_refsource_REDHAT
🔗 RHSA-2026:42063 - Security Advisory - Red Hat Customer Portal 查看完整文章 vendor-advisory x_refsource_REDHAT
🔗 RHSA-2026:82336 - Security Advisory - Red Hat Customer Portal vendor-advisory x_refsource_REDHAT
🔗 RHSA-2026:51183 - Security Advisory - Red Hat Customer Portal vendor-advisory x_refsource_REDHAT
🔗 RHSA-2026:72470 - Security Advisory - Red Hat Customer Portal vendor-advisory x_refsource_REDHAT
🔗 RHSA-2026:82347 - Security Advisory - Red Hat Customer Portal vendor-advisory x_refsource_REDHAT
🔗 RHSA-2026:82304 - Security Advisory - Red Hat Customer Portal vendor-advisory x_refsource_REDHAT
🔗 RHSA-2026:74674 - Security Advisory - Red Hat Customer Portal vendor-advisory x_refsource_REDHAT
🔗 RHSA-2026:72394 - Security Advisory - Red Hat Customer Portal vendor-advisory x_refsource_REDHAT
🔗 RHSA-2026:73962 - Security Advisory - Red Hat Customer Portal vendor-advisory x_refsource_REDHAT
🔗 RHSA-2026:74460 - Security Advisory - Red Hat Customer Portal vendor-advisory x_refsource_REDHAT
🔗 RHSA-2026:73959 - Security Advisory - Red Hat Customer Portal vendor-advisory x_refsource_REDHAT
🔗 RHSA-2026:51177 - Security Advisory - Red Hat Customer Portal 查看完整文章 vendor-advisory x_refsource_REDHAT
🔗 RHSA-2026:82372 - Security Advisory - Red Hat Customer Portal vendor-advisory x_refsource_REDHAT
🔗 RHSA-2026:73960 - Security Advisory - Red Hat Customer Portal vendor-advisory x_refsource_REDHAT
🔗 RHSA-2026:51184 - Security Advisory - Red Hat Customer Portal 查看完整文章 vendor-advisory x_refsource_REDHAT
🔗 RHSA-2026:49512 - Security Advisory - Red Hat Customer Portal 查看完整文章 vendor-advisory x_refsource_REDHAT
🔗 RHSA-2026:51175 - Security Advisory - Red Hat Customer Portal vendor-advisory x_refsource_REDHAT
🔗 RHSA-2026:82857 - Security Advisory - Red Hat Customer Portal vendor-advisory x_refsource_REDHAT
🔗 RHSA-2026:51181 - Security Advisory - Red Hat Customer Portal vendor-advisory x_refsource_REDHAT
🔗 RHSA-2026:97163 - Security Advisory - Red Hat Customer Portal vendor-advisory x_refsource_REDHAT
🔗 RHSA-2026:82354 - Security Advisory - Red Hat Customer Portal vendor-advisory x_refsource_REDHAT
🔗 RHSA-2026:74459 - Security Advisory - Red Hat Customer Portal vendor-advisory x_refsource_REDHAT
🔗 RHSA-2026:74462 - Security Advisory - Red Hat Customer Portal vendor-advisory x_refsource_REDHAT

CVE-2026-58016 其他参考 (1)

🔗 gitlab.gnome.org

https://www.cve.org/CVERecord?id=CVE-2026-58016

同批安全公告 · GNOME · 2026-06-30 · 共 7 条

CVE-2026-58014	7.3 HIGH	GNOME glib 数字错误漏洞
CVE-2026-58011	6.5 MEDIUM	GNOME glib 缓冲区错误漏洞
CVE-2026-58013	6.5 MEDIUM	GNOME glib 缓冲区错误漏洞
CVE-2026-58012	6.5 MEDIUM	GNOME glib 缓冲区错误漏洞
CVE-2026-58010	6.5 MEDIUM	GNOME glib 缓冲区错误漏洞
CVE-2026-58015	5.9 MEDIUM	GNOME glib 安全漏洞

IV. Related Vulnerabilities

Same product: GLib

Same vendor: GNOME

Same weakness: CWE-191

目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

CVE-2026-58016— GNOME GLib 数字错误漏洞

一分钟漏洞结论

可能的 ATT&CK 技术 1 AI

影响版本矩阵 63

一、 漏洞 CVE-2026-58016 基础信息

漏洞信息

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

受影响产品

二、漏洞 CVE-2026-58016 的公开POC

三、漏洞 CVE-2026-58016 的情报信息

CVE-2026-58016 厂商安全公告 (46)

CVE-2026-58016 其他参考 (1)

同批安全公告 · GNOME · 2026-06-30 · 共 7 条

IV. Related Vulnerabilities

目标达成感谢每一位支持者 — 我们达成了 100% 目标！

一、漏洞 CVE-2026-58016 基础信息