Cette page suit l'état du correctif pour Debian. La vulnérabilité elle-même est décrite sur la page CVE principale. Voir CVE-2026-56968 →

DEBIAN-CVE-2026-56968

GNU SASL before 2.2.4 lacks sanitization of a short challenge in _gsasl_ntlm_client_step in the NTLM client, which could result in memory disclosure v...

Description d'origine

La description telle que publiée par la source (souvent en anglais).

GNU SASL before 2.2.4 lacks sanitization of a short challenge in _gsasl_ntlm_client_step in the NTLM client, which could result in memory disclosure via a crafted server.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Paquets affectés

Debian:12 gsasl

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.0-1+deb12u2"}]}]

Debian:13 gsasl

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.2-1.1+deb13u2"}]}]

Debian:14 gsasl

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.4-1"}]}]

Références

advisory security-tracker.debian.org