GS
Product
GNU SASL
3
CVEs
0
On KEV
8.1
Max CVSS
0
New 30D
Severity mix
Critical 0High 2Medium 1Low 0
Watch
Add GNU SASL to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-2469 | 8.1 | Jul 19 | GNU SASL libgsasl server-side read-out-of-bounds with malicious authenticated GSS-API client Affected: before 2.0.1 |
| CVE-2026-48829 | 7.5 | May 24 | In GNU SASL before 2.2.3, DIGEST-MD5 has a NULL pointer dereference affecting both clients and servers, via a known token with no accompanying = character Affected: before 2.2.3 |
| CVE-2026-56968 | 5.3 | Jun 23 | GNU SASL before 2.2.4 lacks sanitization of a short challenge in _gsasl_ntlm_client_step in the NTLM client, which could result in memory disclosure via a crafted server Affected: before 2.2.4 |
Showing 3