Advisories · Technology
gssapi gss-ntlmssp.
Every CVE that names gssapi gss-ntlmssp among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.5 High
GSS-NTLMSSP vulnerable to out-of-bounds read when decoding target information
- gssapi gss-ntlmssp
- Memory corruption
- CVSS 7.5 High
GSS-NTLMSSP vulnerable to memory leak when parsing usernames
- gssapi gss-ntlmssp
- Denial of service
- CVSS 7.5 High
GSS-NTLMSSP vulnerable to incorrect free when decoding target information
- gssapi gss-ntlmssp
- CWE-590
- CVSS 6.5 Medium
GSS-NTLMSSP vulnerable to memory corruption when decoding UTF16 strings
- gssapi gss-ntlmssp
- Memory corruption
- CVSS 5.9 Medium
GSS-NTLMSSP vulnerable to multiple out-of-bounds reads when decoding NTLM fields
- gssapi gss-ntlmssp
- Memory corruption