Vulnerabilities of GNU GNU SASL
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-56968 | GNU SASL before 2.2.4 lacks sanitization of a short challenge in _gsasl_ntlm_client_step in the NTLM client, which could… | 3.7 Low | Jun 23, 2026 |
| CVE-2026-48829 | In GNU SASL before 2.2.3, DIGEST-MD5 has a NULL pointer dereference affecting both clients and servers, via a known… | 7.5 High | May 24, 2026 |
| CVE-2022-2469 | GNU SASL libgsasl server-side read-out-of-bounds with malicious authenticated GSS-API client | 3.8 Low | Jul 19, 2022 |