Vulnerabilities (CVE)

Filtered by vendor Gnu Subscribe
Filtered by product Sasl
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2026-56968 2 Debian, Gnu 2 Debian Linux, Sasl 2026-06-29 N/A 3.7 LOW
GNU SASL before 2.2.4 lacks sanitization of a short challenge in _gsasl_ntlm_client_step in the NTLM client, which could result in memory disclosure via a crafted server.