PT-2026-51567 · Gnu · Gnu Sasl

Afldl · Published 2026-06-23 · Updated 2026-06-23 · CVE-2026-56968

Mitre

CVSS v3.1

3.7

Low

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

GNU SASL before 2.2.4 lacks sanitization of a short challenge in gsasl ntlm client step in the NTLM client, which could result in memory disclosure via a crafted server.

Fix

Weakness Enumeration

CWE-839

Related Identifiers

CVE-2026-56968

Affected Products

Gnu Sasl

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2026-56968 · Security Note
• https://lists.debian.org/debian-security-announce/2026/msg00259.html · Note
• https://lists.gnu.org/archive/html/help-gsasl/2026-06/msg00000.html · Note
• https://gnu.org/software/gsasl · Note
• https://ftp.gnu.org/gnu/gsasl · Note