CVE-2026-48829

A flaw was found in GNU SASL. This vulnerability, a NULL pointer dereference in the DIGEST-MD5 mechanism, can be triggered by a remote attacker providing a specially crafted token without an accompanying equals sign. Successful exploitation could lead to a Denial of Service DoS condition, making...

UBUNTU-CVE-2026-48829

In GNU SASL before 2.2.3, DIGEST-MD5 has a NULL pointer dereference affecting both clients and servers, via a known token with no accompanying = character. This occurs in lib/digest-md5/getsubopt.c...