gssproxy vulnerabilities

CVEs whose affected-version data names the gssproxy package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-116497Medium· 5.5

today

Gssproxy: gssproxy: null pointer dereference in gssx_init_sec_context crashes daemon

A NULL pointer dereference vulnerability was found in gssproxy. When a GSSX_INIT_SEC_CONTEXT request is received with the target_name field absent, the daemon dereferences the resulting NULL pointer and crashes. The request requires no a…

▾ SunlitRed Hat · gssproxyvia CVEORG