CVE-2022-2469

See a problem?
Please try reporting it to the source first.
Source
https://nvd.nist.gov/vuln/detail/CVE-2022-2469
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-2469.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2022-2469
Related
Published
2022-07-19T16:15:08Z
Modified
2025-01-08T14:06:45.287606Z
Downstream
Severity
  • 8.1 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H CVSS Calculator
Summary
[none]
Details

GNU SASL libgsasl server-side read-out-of-bounds with malicious authenticated GSS-API client

References

Affected packages

Debian:11 / gsasl

Package

Name
gsasl
Purl
pkg:deb/debian/gsasl?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.10.0-4+deb11u1

Affected versions

1.*

1.10.0-4

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

Debian:12 / gsasl

Package

Name
gsasl
Purl
pkg:deb/debian/gsasl?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.0.1-1

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

Debian:13 / gsasl

Package

Name
gsasl
Purl
pkg:deb/debian/gsasl?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.0.1-1

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

Git / gitlab.com/gsasl/gsasl

Affected ranges

Type
GIT
Repo
https://gitlab.com/gsasl/gsasl
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
796e4197f696261c1f872d7576371232330bcc30
Fixed
796e4197f696261c1f872d7576371232330bcc30

Affected versions

Other

gsasl-0-0-10
gsasl-0-0-11
gsasl-0-0-12
gsasl-0-0-13
gsasl-0-0-14
gsasl-0-0-15rc1
gsasl-0-0-15rc2
gsasl-0-0-8
gsasl-0-0-9
gsasl-0-1-0
gsasl-0-1-1
gsasl-0-1-2
gsasl-0-1-3
gsasl-0-1-4
gsasl-0-2-0
gsasl-0-2-1
gsasl-0-2-10
gsasl-0-2-11
gsasl-0-2-12
gsasl-0-2-13
gsasl-0-2-14
gsasl-0-2-15
gsasl-0-2-16
gsasl-0-2-17
gsasl-0-2-18
gsasl-0-2-19
gsasl-0-2-2
gsasl-0-2-20
gsasl-0-2-21
gsasl-0-2-23
gsasl-0-2-24
gsasl-0-2-25
gsasl-0-2-26
gsasl-0-2-27
gsasl-0-2-28
gsasl-0-2-29
gsasl-0-2-3
gsasl-0-2-4
gsasl-0-2-5
gsasl-0-2-6
gsasl-0-2-7
gsasl-0-2-8
gsasl-0-2-9
gsasl-1-0
gsasl-1-1
gsasl-1-10-0
gsasl-1-2
gsasl-1-3
gsasl-1-3-90
gsasl-1-3-91
gsasl-1-4-0
gsasl-1-4-1
gsasl-1-5-0
gsasl-1-5-1
gsasl-1-5-2
gsasl-1-5-3
gsasl-1-5-4
gsasl-1-5-5
gsasl-1-6-0
gsasl-1-7-1
gsasl-1-7-2
gsasl-1-7-3
gsasl-1-7-4
gsasl-1-7-5
gsasl-1-7-6
gsasl-1-8-0
gsasl-1-8-1
gsasl-1-9-0
gsasl-1-9-1
gsasl-1-9-2
libgsasl-0-0-0
libgsasl-0-0-1
libgsasl-0-0-2
libgsasl-0-0-3
libgsasl-0-0-4
libgsasl-0-0-5
libgsasl-0-0-6
libgsasl-0-0-7

v1.*

v1.10.0
v1.11.0
v1.11.1
v1.11.2
v1.11.3

v2.*

v2.0.0