https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T20:30:43.262973+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-325002 EUVD-2026-325002 2026-10-02T20:30:43.269810+00:00 EUVD-2026-325002 https://cve.radiocsirt.org/vuln/fkie_cve-2026-48829 fkie_cve-2026-48829 2026-10-02T20:30:43.269854+00:00

In GNU SASL before 2.2.3, DIGEST-MD5 has a NULL pointer dereference affecting both clients and servers, via a known token with no accompanying = character. This occurs in lib/digest-md5/getsubopt.c.

 https://cve.radiocsirt.org/vuln/ghsa-5px8-3qcf-qpm5 GHSA-5px8-3qcf-qpm5 2026-10-02T20:30:43.269889+00:00

In GNU SASL before 2.2.3, DIGEST-MD5 has a NULL pointer dereference affecting both clients and servers, via a known token with no accompanying = character. This occurs in lib/digest-md5/getsubopt.c.

 https://cve.radiocsirt.org/vuln/oesa-2026-3372 OESA-2026-3372 — libgsasl security update 2026-10-02T20:30:43.269906+00:00

Affected: openEuler:24.03-LTS-SP1: libgsasl

The library includes support for the SASL framework and at least partial support for the CRAM-MD5, EXTERNAL, GSSAPI, ANONYMOUS, PLAIN, SECURID, DIGEST-MD5, LOGIN, and NTLM mechanisms. Security Fix(es):

In GNU SASL before 2.2.3, DIGEST-MD5 has a NULL pointer dereference affecting both clients and servers, via a known token with no accompanying = character. This occurs in lib/digest-md5/getsubopt.c.(CVE-2026-48829)

GNU SASL before 2.2.4 lacks sanitization of a short challenge in _gsasl_ntlm_client_step in the NTLM client, which could result in memory disclosure via a crafted server.(CVE-2026-56968)

 https://cve.radiocsirt.org/vuln/opensuse-su-2026:10891-1 openSUSE-SU-2026:10891-1 — gsasl-2.2.3-1.1 on GA media 2026-10-02T20:30:43.269933+00:00

gsasl-2.2.3-1.1 on GA media

 https://cve.radiocsirt.org/vuln/suse-su-2026:22313-1 SUSE-SU-2026:22313-1 — Security update for gsasl 2026-10-02T20:30:43.269950+00:00

Security update for gsasl

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-48829 UBUNTU-CVE-2026-48829 2026-10-02T20:30:43.269964+00:00

Affected: Ubuntu:Pro:14.04:LTS: gsasl, Ubuntu:Pro:16.04:LTS: gsasl, Ubuntu:Pro:18.04:LTS: gsasl, Ubuntu:Pro:20.04:LTS: gsasl, Ubuntu:Pro:22.04:LTS: gsasl, Ubuntu:24.04:LTS: gsasl, Ubuntu:25.10: gsasl, Ubuntu:26.04:LTS: gsasl

In GNU SASL before 2.2.3, DIGEST-MD5 has a NULL pointer dereference affecting both clients and servers, via a known token with no accompanying = character. This occurs in lib/digest-md5/getsubopt.c.