Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
In GNU SASL before 2.2.3, DIGEST-MD5 has a NULL pointer dereference affecting both clients and servers, via a known token with no accompanying = character. This occurs in lib/digest-md5/getsubopt.c.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-05-24 | 1 | Disclosure1 |
| 2026-05-28 | 1 | General1 |
⚠️ Vulnerabilidad en productos GNU ❗ CVE-2026-48829 ➡️ Más info: https://www.cert.gov.py/vulnerabilidad-en-productos-gnu-3/ https://t.co/4g6RyLwlh6
Post summary
The tweet lists CVE-2026-48829 and a link for more information but provides no details on exploitation, fixes, or technical aspects.
CVE-2026-48829 In GNU SASL before 2.2.3, DIGEST-MD5 has a NULL pointer dereference affecting both clients and servers, via a known token with no accompanying = character. This occur… https://www.cve.org/CVERecord?id=CVE-2026-48829
Post summary
The post announces a NULL pointer dereference flaw in GNU SASL’s DIGEST‑MD5 implementation (before 2.2.3) that can affect both clients and servers when a token lacks an '=' character.