SUSE CVE-2022-50821

In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Don't leak netobj memory when gssreadproxyverf fails...

SUSE CVE-2025-58181

SSH servers parsing GSSAPI authentication requests do not validate the number of mechanisms specified in the request, allowing an attacker to cause unbounded memory consumption...

PT-2025-54973

Уязвимость функции gss read proxy verf модуля net/sunrpc/auth gss/svcauth gss.c ядра операционной системы Linux связана с разыменованием указателей. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, вызвать отказ в обслуживании...

EUVD-2025-37281

Malicious code in gel-gss npm...

Malicious code in gel-gss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8548b80c889e1007553fed7b6c39f257eb8e7bb58a140bf4c3b00ba3e23a6934 The package gel-gss was found to contain malicious code...

MAL-2025-49283 Malicious code in gel-gss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8548b80c889e1007553fed7b6c39f257eb8e7bb58a140bf4c3b00ba3e23a6934 The package gel-gss was found to contain malicious code...

EUVD-2005-1127

Malware in sbrugna...

EUVD-2010-1350

Malware in sbrugna...

EUVD-2010-0659

Malware in sbrugna...

EUVD-2020-17410

Malware in sbrugna...

EUVD-2020-17411

Malware in sbrugna...

EUVD-2020-17412

Malware in sbrugna...

EUVD-2010-1353

Malware in sbrugna...

EUVD-2020-29473

Malware in sbrugna...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: krb5 (UTSA-2025-986178)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986178 advisory. In MIT Kerberos 5 aka krb5 before 1.21.3, an attacker can cause invalid memory reads during GSS message token handling by sending message tokens with invalid length...

EUVD-2024-36619

Malicious code in bioql PyPI...

EUVD-2024-36618

Malicious code in bioql PyPI...

EUVD-2024-33375

Malicious code in bioql PyPI...

EUVD-2022-34729

Malicious code in bioql PyPI...

curl: Race condition on global `gss_context` during SOCKS5 GSS-API negotiation in libcurl

Summary: Concurrent SOCKS5 GSS-API authentications share a file-scope global gsscontext without synchronization, causing data races and undefined behavior. - Global context defined at: 52:54:curl/lib/socksgssapi.c static gssctxidt gsscontext = GSSCNOCONTEXT; - Passed by address into the GSS init...