| Package | Affected versions | Patched versions |
|---|---|---|
| sasl | < 2.2.4 | 2.2.4 |
GNU SASL before 2.2.4 lacks sanitization of a short challenge in _gsasl_ntlm_client_step in the NTLM client, which could result in memory disclosure via a crafted server.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free