REDHAT-BUG-2499675: Medium severity Gnome GDBus (gdbusauth) vulnerability

Published Jul 13, 2026

Updated

A GDBus authentication denial-of-service / resource exhaustion flaw has been reported. The vulnerability involves a lack of line length limitations when gdbusauth reads input from a client. This can be exploited by an unauthenticated remote or local attacker to cause excessive memory and CPU consumption.

Affected Software

1 affected component

Gnome GDBus (gdbusauth)

Event History

Jul 13, 2026

Data Sourced

via Red Hat·01:51 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

Who can exploit this issue?

An unauthenticated attacker can exploit it remotely or locally by sending input to gdbusauth. Successful exploitation can cause excessive memory and CPU consumption, resulting in denial of service or resource exhaustion.

What is the underlying condition that triggers the resource exhaustion?

The flaw is caused by gdbusauth not enforcing line-length limits while reading client input. An attacker can provide excessively long input lines to drive memory and CPU consumption.

REDHAT-BUG-2499675: Medium severity Gnome GDBus (gdbusauth) vulnerability

Affected Software

Event History

Frequently Asked Questions

Who can exploit this issue?

What is the underlying condition that triggers the resource exhaustion?

Company

Resources

Contact

Frequently Asked Questions

Who can exploit this issue?

What is the underlying condition that triggers the resource exhaustion?