Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2026-8925

Опубликовано: 03 июл. 2026
Источник: ubuntu
Приоритет: medium
CVSS3: 9.8

Описание

The curl logic that works with SASL authentication could end up cleaning up the GSASL context twice without clearing the pointer in between, making it free() the same pointer twice.

РелизСтатусПримечание
devel

needed

esm-infra-legacy/trusty

not-affected

code not present
esm-infra-legacy/xenial

not-affected

code not present
esm-infra/bionic

not-affected

code not present
esm-infra/focal

not-affected

code not present
jammy

released

7.81.0-1ubuntu1.25
noble

released

8.5.0-2ubuntu10.10
questing

released

8.14.1-2ubuntu1.4
resolute

released

8.18.0-1ubuntu2.2
upstream

pending

8.21.0

Показывать по

9.8 Critical

CVSS3

Связанные уязвимости

CVSS3: 8.1
redhat
2 месяца назад

The curl logic that works with SASL authentication could end up cleaning up the GSASL context *twice* without clearing the pointer in between, making it `free()` the same pointer twice.

CVSS3: 9.8
nvd
2 месяца назад

The curl logic that works with SASL authentication could end up cleaning up the GSASL context *twice* without clearing the pointer in between, making it `free()` the same pointer twice.

msrc
2 месяца назад

SASL double-free

CVSS3: 9.8
debian
2 месяца назад

The curl logic that works with SASL authentication could end up cleani ...

CVSS3: 9.8
github
2 месяца назад

The curl logic that works with SASL authentication could end up cleaning up the GSASL context *twice* without clearing the pointer in between, making it `free()` the same pointer twice.

9.8 Critical

CVSS3