PT-2026-51567 · Gnu · Gnu Sasl

Afldl · Publicado 2026-06-23 · Atualizado 2026-06-23 · CVE-2026-56968

Mitre

CVSS v3.1

3.7

Baixa

Vetor base

AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

GNU SASL before 2.2.4 lacks sanitization of a short challenge in gsasl ntlm client step in the NTLM client, which could result in memory disclosure via a crafted server.

Correção

Enumeração de Fraquezas

CWE-839

Identificadores relacionados

CVE-2026-56968

Produtos afetados

Gnu Sasl

Referências · 5

• https://lists.debian.org/debian-security-announce/2026/msg00259.html · Nota
• https://lists.gnu.org/archive/html/help-gsasl/2026-06/msg00000.html · Nota
• https://gnu.org/software/gsasl · Nota
• https://ftp.gnu.org/gnu/gsasl · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-56968 · Nota de Segurança