Denial of Service Vulnerability in glib-networking by Red Hat

CVE-2026-10028

What is CVE-2026-10028?

A vulnerability exists in glib-networking that enables a remote attacker to exploit an application's certificate verification process when it uses the GnuTLS backend. By providing a specially crafted certificate chain that includes circular issuer relationships, an attacker can trigger an infinite loop during verification. This results in unbounded resource consumption, ultimately leading to a denial of service for the affected application, preventing normal operations.

References