debian/gssproxy vulnerabilities

Latest debian/gssproxy CVEs

Newest publication first

1. CVE-2026-116497 Gssproxy: gssproxy: null pointer dereference in gssx_init_sec_context crashes daemon

   Published 2026-10-26

   Medium·CVSS 5.5 EPSS 0.14%

   A NULL pointer dereference vulnerability was found in gssproxy. When a GSSX_INIT_SEC_CONTEXT request is received with the target_name field absent, the daemon dereferences the resulting NULL pointer and crashes. The request requires no authentication, allowing any local user to c...

2. DLA-2516-1 gssproxy - security update

   Published 2021-01-04

   Unknown

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.