Search Results (2 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-48829 1 Gnu 1 Gnu Sasl 2026-05-24 7.5 High
In GNU SASL before 2.2.3, DIGEST-MD5 has a NULL pointer dereference affecting both clients and servers, via a known token with no accompanying = character. This occurs in lib/digest-md5/getsubopt.c.
CVE-2022-2469 2 Debian, Gnu 2 Debian Linux, Gnu Sasl 2024-11-21 3.8 Low
GNU SASL libgsasl server-side read-out-of-bounds with malicious authenticated GSS-API client