{"id":"CVE-2022-2469","aliases":["DEBIAN-CVE-2022-2469","DSA-5189-1","EUVD-2022-34729","GHSA-r9xr-xfwx-6crw","MGASA-2022-0298","OESA-2024-1351","OESA-2024-1441","OESA-2024-1442","OESA-2024-1443","OESA-2024-1444","OESA-2024-1445","SUSE-SU-2022:3561-1","SUSE-SU-2022:3562-1","SUSE-SU-2022:3563-1","UBUNTU-CVE-2022-2469","USN-6169-1","openSUSE-SU-2024:12325-1","openSUSE-SU-2024:13666-1"],"status":"published","title":"GNU SASL libgsasl server-side read-out-of-bounds with malicious authenticated GSS-API client","description":"GNU SASL libgsasl server-side read-out-of-bounds with malicious authenticated GSS-API client","severity":{"version":"3.1","score":3.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L","level":"low","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.01572,"percentile":0.75578,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-125"],"published":"2022-07-19T15:53:56Z","modified":"2026-10-28T10:25:49Z","fixes":[{"ecosystem":"Debian:12","package":"gsasl","fixed_in":["2.0.1-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"gsasl","fixed_in":["2.0.1-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"gsasl","fixed_in":["2.0.1-1"],"sources":["osv"]},{"ecosystem":"Debian:10","package":"gsasl","fixed_in":["1.8.0-8+deb10u1"],"sources":["osv"]},{"ecosystem":"Debian:11","package":"gsasl","fixed_in":["1.10.0-4+deb11u1"],"sources":["osv"]},{"ecosystem":"Mageia:8","package":"libgsasl","fixed_in":["1.8.1-2.1.mga8"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP3","package":"libgsasl","fixed_in":["1.8.1-1.oe2203sp3"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP1","package":"libgsasl","fixed_in":["1.8.1-2.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP4","package":"libgsasl","fixed_in":["1.8.1-2.oe2003sp4"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS","package":"libgsasl","fixed_in":["1.8.1-2.oe2203"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP1","package":"libgsasl","fixed_in":["1.8.1-2.oe2203sp1"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP2","package":"libgsasl","fixed_in":["1.8.1-2.oe2203sp2"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Proxy Module 4.2","package":"libgsasl","fixed_in":["1.8.0-150300.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server Module 4.2","package":"libgsasl","fixed_in":["1.8.0-150300.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Proxy Module 4.1","package":"libgsasl","fixed_in":["1.8.0-150200.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server Module 4.1","package":"libgsasl","fixed_in":["1.8.0-150200.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Proxy Module 4.3","package":"libgsasl","fixed_in":["1.8.0-150400.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server Module 4.3","package":"libgsasl","fixed_in":["1.8.0-150400.3.3.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"gsasl","fixed_in":["1.8.0-2ubuntu2+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"gsasl","fixed_in":["1.8.0-8ubuntu2+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"gsasl","fixed_in":["1.8.0-8ubuntu3+esm2"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:20.04:LTS","package":"gsasl","fixed_in":["1.8.1-1ubuntu0.1~esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:22.04:LTS","package":"gsasl","fixed_in":["1.10.0-5ubuntu0.1~esm1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"gsasl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.1-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"gsasl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.1-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"gsasl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.1-1"}]}]},{"source":"osv","ecosystem":"Debian:10","package":"gsasl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0-8+deb10u1"}]}],"versions":["1.8.0-8"]},{"source":"osv","ecosystem":"Debian:11","package":"gsasl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.0-4+deb11u1"}]}],"versions":["1.10.0-4"]},{"source":"osv","ecosystem":"Mageia:8","package":"libgsasl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.1-2.1.mga8"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP3","package":"libgsasl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.1-1.oe2203sp3"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"libgsasl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.1-2.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"libgsasl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.1-2.oe2003sp4"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"libgsasl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.1-2.oe2203"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP1","package":"libgsasl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.1-2.oe2203sp1"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP2","package":"libgsasl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.1-2.oe2203sp2"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Proxy Module 4.2","package":"libgsasl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0-150300.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.2","package":"libgsasl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0-150300.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Proxy Module 4.1","package":"libgsasl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0-150200.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.1","package":"libgsasl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0-150200.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Proxy Module 4.3","package":"libgsasl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0-150400.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.3","package":"libgsasl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0-150400.3.3.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"gsasl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0-2ubuntu2+esm1"}]}],"versions":["1.8.0-2ubuntu1","1.8.0-2ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"gsasl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0-8ubuntu2+esm1"}]}],"versions":["1.8.0-8ubuntu1","1.8.0-8ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"gsasl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0-8ubuntu3+esm2"}]}],"versions":["1.8.0-8ubuntu3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"gsasl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.1-1ubuntu0.1~esm1"}]}],"versions":["1.8.0-8ubuntu3","1.8.1-1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"gsasl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.0-5ubuntu0.1~esm1"}]}],"versions":["1.10.0-4","1.10.0-5"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"gsasl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0-2ubuntu2+esm1"}]}],"versions":["1.8.0-2ubuntu1","1.8.0-2ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"gsasl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0-8ubuntu2+esm1"}]}],"versions":["1.8.0-8ubuntu1","1.8.0-8ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"gsasl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0-8ubuntu3+esm2"}]}],"versions":["1.8.0-8ubuntu3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"gsasl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.1-1ubuntu0.1~esm1"}]}],"versions":["1.8.0-8ubuntu3","1.8.1-1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"gsasl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.0-5ubuntu0.1~esm1"}]}],"versions":["1.10.0-4","1.10.0-5"]}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"gnu","product":"gnu sasl"},{"vendor":"gnu","product":"gnu_sasl"}],"references":[{"url":"https://gitlab.com/gsasl/gsasl/-/commit/796e4197f696261c1f872d7576371232330bcc30","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","fix","report"]},{"url":"https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-2469.json","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","VDB Entry","web","report"]},{"url":"https://www.debian.org/security/2022/dsa-5189","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","Third Party Advisory","advisory","web","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-2469","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-r9xr-xfwx-6crw"},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/2xxx/CVE-2022-2469.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2022-2469","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2022-0298.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=30670","tags":["report"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2024-1351","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2024-1441","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2024-1442","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2024-1443","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2024-1444","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2024-1445","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20223561-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1201715","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2469","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20223562-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20223563-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2022-2469","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-6169-1","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-2469","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2022-2469","description":"GNU SASL libgsasl server-side read-out-of-bounds with malicious authenticated GSS-API client","status":"published","published":"2022-07-19T15:53:56Z","modified":"2024-08-03T00:39:07.671Z","cvss":[{"version":"3.1","score":3.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L","level":"low","assessor":"cna"}],"updated_at":"2026-11-02T14:34:32.495407Z"}],"euvd":[{"id":"EUVD-2022-34729","description":"GNU SASL libgsasl server-side read-out-of-bounds with malicious authenticated GSS-API client","status":"published","published":"2022-07-19T15:53:56Z","modified":"2024-08-03T00:39:07Z","cvss":[{"version":"3.1","score":3.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L","level":"low"}],"updated_at":"2026-11-03T03:25:58.383516Z"}],"ghsa":[{"id":"GHSA-r9xr-xfwx-6crw","title":"GNU SASL libgsasl server-side read-out-of-bounds with malicious authenticated GSS-API client","description":"GNU SASL libgsasl server-side read-out-of-bounds with malicious authenticated GSS-API client","status":"published","published":"2022-07-20T00:00:20Z","modified":"2023-01-27T05:07:08Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","level":"high"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T14:43:03.960564Z"}],"nvd":[{"id":"CVE-2022-2469","description":"GNU SASL libgsasl server-side read-out-of-bounds with malicious authenticated GSS-API client","status":"published","published":"2022-07-19T16:15:08.643Z","modified":"2026-06-17T04:41:57.247Z","cvss":[{"version":"3.1","score":3.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L","level":"low","assessor":"secondary"},{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","level":"high","assessor":"primary"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T14:07:23.686531Z"}],"osv":[{"id":"CVE-2022-2469","description":"GNU SASL libgsasl server-side read-out-of-bounds with malicious authenticated GSS-API client","status":"published","published":"2022-07-19T15:53:56Z","modified":"2026-10-28T10:25:49.587099838Z","cvss":[{"version":"3.1","score":3.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L","level":"low"}],"updated_at":"2026-11-02T15:44:24.428403Z"},{"id":"DEBIAN-CVE-2022-2469","description":"GNU SASL libgsasl server-side read-out-of-bounds with malicious authenticated GSS-API client","status":"published","published":"2022-07-19T16:15:08.643Z","modified":"2026-11-03T08:01:04.047607708Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","level":"high"}],"updated_at":"2026-11-03T08:25:01.007408Z"},{"id":"OESA-2024-1351","title":"libgsasl security update","description":"The library includes support for the SASL framework and at least partial support for the CRAM-MD5, EXTERNAL, GSSAPI, ANONYMOUS, PLAIN, SECURID, DIGEST-MD5, LOGIN, and NTLM mechanisms.\r\n\r\nSecurity Fix(es):\r\n\r\nGNU SASL libgsasl server-side read-out-of-bounds with malicious authenticated GSS-API client(CVE-2022-2469)","status":"published","published":"2024-03-29T11:06:47Z","modified":"2026-08-18T01:17:14.798591583Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:41.095407Z"},{"id":"OESA-2024-1441","title":"libgsasl security update","description":"The library includes support for the SASL framework and at least partial support for the CRAM-MD5, EXTERNAL, GSSAPI, ANONYMOUS, PLAIN, SECURID, DIGEST-MD5, LOGIN, and NTLM mechanisms.\r\n\r\nSecurity Fix(es):\r\n\r\nGNU SASL libgsasl server-side read-out-of-bounds with malicious authenticated GSS-API client(CVE-2022-2469)","status":"published","published":"2024-04-12T11:06:53Z","modified":"2026-08-18T01:18:22.053024801Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:41.095407Z"},{"id":"OESA-2024-1442","title":"libgsasl security update","description":"The library includes support for the SASL framework and at least partial support for the CRAM-MD5, EXTERNAL, GSSAPI, ANONYMOUS, PLAIN, SECURID, DIGEST-MD5, LOGIN, and NTLM mechanisms.\r\n\r\nSecurity Fix(es):\r\n\r\nGNU SASL libgsasl server-side read-out-of-bounds with malicious authenticated GSS-API client(CVE-2022-2469)","status":"published","published":"2024-04-12T11:06:53Z","modified":"2026-08-18T01:18:22.013569579Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:41.095407Z"},{"id":"OESA-2024-1443","title":"libgsasl security update","description":"The library includes support for the SASL framework and at least partial support for the CRAM-MD5, EXTERNAL, GSSAPI, ANONYMOUS, PLAIN, SECURID, DIGEST-MD5, LOGIN, and NTLM mechanisms.\r\n\r\nSecurity Fix(es):\r\n\r\nGNU SASL libgsasl server-side read-out-of-bounds with malicious authenticated GSS-API client(CVE-2022-2469)","status":"published","published":"2024-04-12T11:06:53Z","modified":"2026-08-18T01:18:22.068213047Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:41.095407Z"},{"id":"OESA-2024-1444","title":"libgsasl security update","description":"The library includes support for the SASL framework and at least partial support for the CRAM-MD5, EXTERNAL, GSSAPI, ANONYMOUS, PLAIN, SECURID, DIGEST-MD5, LOGIN, and NTLM mechanisms.\r\n\r\nSecurity Fix(es):\r\n\r\nGNU SASL libgsasl server-side read-out-of-bounds with malicious authenticated GSS-API client(CVE-2022-2469)","status":"published","published":"2024-04-12T11:06:53Z","modified":"2026-08-18T01:18:21.591594197Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:41.095407Z"},{"id":"OESA-2024-1445","title":"libgsasl security update","description":"The library includes support for the SASL framework and at least partial support for the CRAM-MD5, EXTERNAL, GSSAPI, ANONYMOUS, PLAIN, SECURID, DIGEST-MD5, LOGIN, and NTLM mechanisms.\r\n\r\nSecurity Fix(es):\r\n\r\nGNU SASL libgsasl server-side read-out-of-bounds with malicious authenticated GSS-API client(CVE-2022-2469)","status":"published","published":"2024-04-12T11:06:53Z","modified":"2026-08-18T01:18:21.619001983Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:41.095407Z"},{"id":"UBUNTU-CVE-2022-2469","description":"GNU SASL libgsasl server-side read-out-of-bounds with malicious authenticated GSS-API client","status":"published","published":"2022-07-19T16:15:00Z","modified":"2026-04-22T13:18:31.787796Z","cvss":[{"version":"3.1","score":3.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L","level":"low"},{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T16:53:53.13624Z"},{"id":"DSA-5189-1","title":"gsasl - security update","status":"published","published":"2022-07-24T00:00:00Z","modified":"2026-03-09T02:10:37.802777Z","updated_at":"2026-11-02T15:46:17.543497Z"},{"id":"MGASA-2022-0298","title":"Updated libgsasl packages fix security vulnerability","description":"GNU SASL libgsasl server-side read-out-of-bounds with malicious\nauthenticated GSS-API client. (CVE-2022-2469)\n","status":"published","published":"2022-08-25T21:21:07Z","modified":"2026-04-16T04:42:27.953998646Z","updated_at":"2026-11-02T15:49:42.263076Z"},{"id":"openSUSE-SU-2024:12325-1","title":"libgsasl-devel-1.10.0-3.1 on GA media","description":"These are all security issues fixed in the libgsasl-devel-1.10.0-3.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:16:38.633983Z","updated_at":"2026-11-02T16:58:35.485255Z"},{"id":"openSUSE-SU-2024:13666-1","title":"gsasl-2.2.1-1.1 on GA media","description":"These are all security issues fixed in the gsasl-2.2.1-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2025-05-07T18:13:51.497544Z","updated_at":"2026-11-02T16:58:36.327643Z"},{"id":"SUSE-SU-2022:3561-1","title":"Security update for libgsasl","description":"This update for libgsasl fixes the following issues:\n\n- CVE-2022-2469: Fixed OOB read in GSSAPI server (bsc#1201715).\n\n","status":"published","published":"2022-10-11T07:45:31Z","modified":"2026-02-04T04:36:25.121202Z","updated_at":"2026-11-02T15:53:51.440565Z"},{"id":"SUSE-SU-2022:3562-1","title":"Security update for libgsasl","description":"This update for libgsasl fixes the following issues:\n\n- CVE-2022-2469: Fixed OOB read in GSSAPI server (bsc#1201715).\n","status":"published","published":"2022-10-11T07:45:48Z","modified":"2026-02-04T03:55:09.743127Z","updated_at":"2026-11-02T15:53:51.440565Z"},{"id":"SUSE-SU-2022:3563-1","title":"Security update for libgsasl","description":"This update for libgsasl fixes the following issues:\n\n- CVE-2022-2469: Fixed OOB read in GSSAPI server (bsc#1201715).\n\n","status":"published","published":"2022-10-11T07:46:10Z","modified":"2026-02-04T03:46:22.104131Z","updated_at":"2026-11-02T15:53:51.440565Z"},{"id":"USN-6169-1","title":"gsasl vulnerability","description":"It was discovered that GNU SASL's GSSAPI server could make an\nout-of-bounds reads if given specially crafted GSS-API authentication\ndata. A remote attacker could possibly use this issue to cause a\ndenial of service or to expose sensitive information.\n","status":"published","published":"2023-06-15T19:38:03Z","modified":"2026-06-29T13:50:53.236783908Z","updated_at":"2026-11-02T16:58:16.738762Z"}]}}