← Back

Sasl

sasl

Vendor: Gnu • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2026-56968
2Debian
Gnu
2Debian Linux
Sasl
Jun 29, 2026
Jun 23, 2026
N/A· v4
5.3 MEDIUM· v3
N/A· v2
GNU SASL before 2.2.4 lacks sanitization of a short challenge in _gsasl_ntlm_client_step in the NTLM client, which could result in memory disclosure via a crafted server.