← Database

CVE-2026-56968

LOW CVSS: 3.7 Published: 2026-06-23 Modified: 2026-07-31

Description

GNU SASL before 2.2.4 lacks sanitization of a short challenge in _gsasl_ntlm_client_step in the NTLM client, which could result in memory disclosure via a crafted server.

Affected Platforms

Debian Debian LinuxGnu Sasl

Weakness Type

CWE-839, CWE-908

References