Vendor/product archive

gnu / sasl CVEs

Beta · best-effort

1 CVEs tagged to gnu / sasl — 0 Critical, 0 High, 0 Medium, 1 Low, 0 Unrated.

See this archive with more filters Back to gnu vendor archive

CVE-2026-56968

Published Jun 23, 2026

GNU SASL before 2.2.4 lacks sanitization of a short challenge in _gsasl_ntlm_client_step in the NTLM client, which could result in memory disclosure via a crafted server.

CVSS 3.7 · Low

evidence mentions: 4
Buzz score: 36.1

Vendor/product tagsBeta · best-effort

Showing 1-1 of 1 CVEsPage 1 of 1