← All advisories

Low severity3.8NVD Advisory· Published Jul 19, 2022· Updated Jun 17, 2026

CVE-2022-2469

CVE-2022-2469

Description

GNU SASL libgsasl server-side read-out-of-bounds with malicious authenticated GSS-API client

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

8

GNU/libgsaslllm-fuzzy
osv-coords6 versions
pkg:rpm/suse/libgsasl&distro=SUSE%20Manager%20Proxy%20Module%204.1 pkg:rpm/suse/libgsasl&distro=SUSE%20Manager%20Proxy%20Module%204.2 pkg:rpm/suse/libgsasl&distro=SUSE%20Manager%20Proxy%20Module%204.3 pkg:rpm/suse/libgsasl&distro=SUSE%20Manager%20Server%20Module%204.1 pkg:rpm/suse/libgsasl&distro=SUSE%20Manager%20Server%20Module%204.2 pkg:rpm/suse/libgsasl&distro=SUSE%20Manager%20Server%20Module%204.3
< 1.8.0-150200.3.3.1+ 5 more
- (no CPE)range: < 1.8.0-150200.3.3.1
- (no CPE)range: < 1.8.0-150300.3.3.1
- (no CPE)range: < 1.8.0-150400.3.3.1
- (no CPE)range: < 1.8.0-150200.3.3.1
- (no CPE)range: < 1.8.0-150300.3.3.1
- (no CPE)range: < 1.8.0-150400.3.3.1
GNU/GNU SASLcpe-rescue
Range: >=0.0.0, <2.0.1

Patches

Vulnerability mechanics

References

3

gitlab.com/gsasl/gsasl/-/commit/796e4197f696261c1f872d7576371232330bcc30nvdPatchThird Party Advisory
gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-2469.jsonnvdThird Party AdvisoryVDB Entry
www.debian.org/security/2022/dsa-5189nvdThird Party Advisory

News mentions

0

No linked articles in our index yet.