PT-2026-51567
CVE-2026-56968
·
Published
2026-06-23
·
Updated
2026-08-20
Description by
CVSS 3.1
7.5
HighMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions
GNU SASL versions prior to 2.2.4
Description
The NTLM client lacks sanitization of a short challenge within the
gsasl ntlm client step() function. This flaw allows a crafted server to cause memory disclosure.Recommendations
Update to version 2.2.4 or later.
Found an issue in the description? Have something to add? Feel free to write us 👾