GNU SASL before 2.2.4 lacks sanitization of a short challenge in _gsasl_ntlm_client_step in the NTLM client, which could result in memory disclosure via a crafted server.

The remote Debian 11 / 12 host has packages installed that are affected by a vulnerability as referenced in the dla-4707 advisory.

    -------------------------------------------------------------------------     Debian LTS Advisory DLA-4707-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/          Carlos Henrique Lima Melara     July 30, 2026                                 https://wiki.debian.org/LTS
    -------------------------------------------------------------------------

    Package        : gsasl     Version        : 1.10.0-4+deb11u3 2.2.0-1+deb12u2     CVE ID         : CVE-2026-56968

    It was discovered that missing input sanitising in the NTLM client of the     GNU SASL library could result in memory disclosure.

    For Debian 11 bullseye, this problem has been fixed in version     1.10.0-4+deb11u3.

    For Debian 12 bookworm, this problem has been fixed in version     2.2.0-1+deb12u2.

    We recommend that you upgrade your gsasl packages.

    For the detailed security status of gsasl please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/gsasl

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS     Attachment:
    signature.asc     Description: PGP signature

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21303-1 advisory.

    This update for gsasl fixes the following issue

    - CVE-2026-56968: improper sanitization of a short challenge in `_gsasl_ntlm_client_step` of the NTLM     client can lead to       memory disclosure (bsc#1268885).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - GNU SASL before 2.2.4 lacks sanitization of a short challenge in _gsasl_ntlm_client_step in the NTLM     client, which could result in memory disclosure via a crafted server. (CVE-2026-56968)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Type	Severity
331322	Debian dla-4707 : gsasl - security update	Nessus	Debian Local Security Checks	Local	medium
326676	openSUSE 16 Security Update : gsasl (openSUSE-SU-2026:21303-1)	Nessus	SuSE Local Security Checks	Local	medium
323645	Linux Distros Unpatched Vulnerability : CVE-2026-56968	Nessus	Misc.	Local	medium

Detections

Analytics

CVE-2026-56968

medium

Tenable Plugins

medium

medium

medium