CVE-2026-48829

Description

In GNU SASL before 2.2.3, DIGEST-MD5 has a NULL pointer dereference affecting both clients and servers, via a known token with no accompanying = character. This occurs in lib/digest-md5/getsubopt.c.

PUBLISHED Reserved 2026-05-24 | Published 2026-05-24 | Updated 2026-06-05 | Assigner mitre

Problem types

CWE-476 NULL Pointer Dereference

Product status

References

lists.debian.org/debian-lts-announce/2026/06/msg00007.html

lists.gnu.org/archive/html/help-gsasl/2026-05/msg00002.html

codeberg.org/...mit/da9b5ae2962b014879e4a406c3b38f25aa70e97a

lists.debian.org/debian-security-announce/2026/msg00182.html

lists.gnu.org/archive/html/help-gsasl/2026-05/msg00000.html

cve.org (CVE-2026-48829)

nvd.nist.gov (CVE-2026-48829)

Download JSON