EPSS
Percentile
45.8%
gss-ntlmssp is vulnerable to Denial Of Service (DoS). The vulnerability exists because of the incorrect free when decoding target information, which leads to an application crash via the main gss_accept_sec_context entry point
gss_accept_sec_context
github.com/gssapi/gss-ntlmssp/commit/c16100f60907a2de92bcb676f303b81facee0f64
github.com/gssapi/gss-ntlmssp/releases/tag/v1.2.0
github.com/gssapi/gss-ntlmssp/security/advisories/GHSA-7q7f-wqcg-mvfg
security-tracker.debian.org/tracker/CVE-2023-25565