A flaw was found in glib-networking. A remote attacker can exploit this vulnerability by presenting a specially crafted certificate chain to an application that uses glib-networking with the GnuTLS backend enabled and performs certificate verification. This crafted chain, which contains circular issuer relationships, can cause an infinite loop during certificate verification. The unbounded traversal consumes excessive CPU resources, leading to a denial of service for the affected process or worker.

Multiple Vulnerabilities in GNOME GLib

The remote SUSE Linux SLES12 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2026:3121-1 advisory.

    This update for glib-networking fixes the following issue

    - CVE-2026-10028: two certificates which are each signed by the other can lead to an infinite loop     (bsc#1267979).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:3032-1 advisory.

    This update for glib-networking fixes the following issue

    - CVE-2026-10028: two certificates which are each signed by the other can lead to an infinite loop     (bsc#1267979).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - A flaw was found in glib-networking. A remote attacker can exploit this vulnerability by presenting a     specially crafted certificate chain to an application that uses glib-networking with the GnuTLS backend     enabled and performs certificate verification. This crafted chain, which contains circular issuer     relationships, can cause an infinite loop during certificate verification. The unbounded traversal     consumes excessive CPU resources, leading to a denial of service for the affected process or worker.
    (CVE-2026-10028)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Type	Severity
328681	SUSE SLES12 Security Update : glib-networking (SUSE-SU-2026:3121-1)	Nessus	SuSE Local Security Checks	Local	medium
327295	SUSE SLED15 / SLES15 Security Update : glib-networking (SUSE-SU-2026:3032-1)	Nessus	SuSE Local Security Checks	Local	medium
317531	Linux Distros Unpatched Vulnerability : CVE-2026-10028	Nessus	Misc.	Local	medium

Detections

Analytics

CVE-2026-10028

medium

Tenable Plugins

Coming Soon

medium

medium

medium