{"id":"AZL-112445","summary":"CVE-2026-103963 affecting package glib-networking 2.78.0-2","details":"A flaw was found in glib-networking. When establishing connections using Transport Layer Security (TLS) version 1.3, the client-side session cache does not limit the number of session tickets retained for a single host. A malicious server can exploit this by sending excessive session ticket messages, causing the client application to continuously consume memory. This unbounded memory growth can exhaust system memory, resulting in a Denial of Service (DoS).","modified":"2026-11-02T14:18:11.819486815Z","published":"2026-10-30T05:16:57Z","upstream":["CVE-2026-103963"],"references":[{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-103963"}],"affected":[{"package":{"name":"glib-networking","ecosystem":"Azure Linux:3","purl":"pkg:rpm/azure-linux/glib-networking"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"2.78.0-2"}]}],"database_specific":{"source":"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-112445.json"}}],"schema_version":"1.9.2"}