Veille CVE

Recherche « GNU SASL »

2 CVE

Critique 0 Élevée 1 Moyenne 1 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « GNU SASL » ✕
  1. CVE-2026-56968 5.3 Moyenne

    GNU SASL · Debian debian linux

    GNU SASL before 2.2.4 lacks sanitization of a short challenge in _gsasl_ntlm_client_step in the NTLM client, which could result in memory disclosure via a crafted server.

  2. CVE-2026-48829 7.5 Élevée

    GNU SASL

    In GNU SASL before 2.2.3, DIGEST-MD5 has a NULL pointer dereference affecting both clients and servers, via a known token with no accompanying = character. This occurs in lib/digest-md5/getsubopt.c.