ByteOS Network

NVD Vulnerability Details :

CVE-2026-56968

Received

Source-cve@mitre.org

Published At-23 Jun, 2026 | 17:17

Updated At-23 Jun, 2026 | 18:18

GNU SASL before 2.2.4 lacks sanitization of a short challenge in _gsasl_ntlm_client_step in the NTLM client, which could result in memory disclosure via a crafted server.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Secondary	3.1	3.7	LOW	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
			N/A

Type: Secondary

Version: 3.1

Base score: 3.7

Base severity: LOW

Vector:

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

Type: N/A

Version:

Base score:

Base severity: N/A

Vector:

Weaknesses

CWE ID	Type	Source
CWE-839	Secondary	cve@mitre.org

CWE ID: CWE-839

Type: Secondary

Source: cve@mitre.org

References

Hyperlink	Source	Resource
https://ftp.gnu.org/gnu/gsasl/	cve@mitre.org	N/A
https://lists.debian.org/debian-security-announce/2026/msg00259.html	cve@mitre.org	N/A
https://lists.gnu.org/archive/html/help-gsasl/2026-06/msg00000.html	cve@mitre.org	N/A
https://www.gnu.org/software/gsasl/	cve@mitre.org	N/A