EUVD-2026-31562
GHSA-5px8-3qcf-qpm5
CVSS VectorNVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Lifecycle Timeline
2DescriptionNVD
In GNU SASL before 2.2.3, DIGEST-MD5 has a NULL pointer dereference affecting both clients and servers, via a known token with no accompanying = character. This occurs in lib/digest-md5/getsubopt.c.
AnalysisAI
Unauthenticated denial of service in GNU SASL before version 2.2.3 occurs through a NULL pointer dereference in the DIGEST-MD5 authentication mechanism. Remote attackers can crash both client and server applications by sending a malformed authentication token that lacks an equals sign character, causing the getsubopt.c parser to dereference a NULL pointer.
Sign in for full analysis, threat intelligence, and remediation guidance.
RemediationAI
Within 24 hours: Identify all systems running GNU SASL versions before 2.2.3 using inventory and dependency scanning tools; assess which applications depend on DIGEST-MD5 authentication. Within 7 days: Disable DIGEST-MD5 as an authentication option where alternative mechanisms are available; isolate affected systems from untrusted networks if disabling is not feasible. …
Sign in for detailed remediation steps.
Share
External POC / Exploit Code
Leaving vuln.today