By vendor

Gnu vulnerabilities

Known CVEs affecting Gnu products, prioritized by severity, with SEC.co remediation and detection guidance.

2 published vulnerabilities

• CVE-2026-57053MEDIUM 4.0

  GNU libidn, a widely-used library for handling internationalized domain names, contains a flaw in its ToUnicode conversion APIs that can read uninitialized memory from your system. This occurs when the library processes certain domain name conversions, potentially exposing sensitive data that happened to be in memory. The vulnerability affects libidn versions before 1.44; the newer libidn2 implementation does not have this issue. While the attack requires local access and specific conditions to trigger, the combination of memory disclosure and potential data corruption makes it a meaningful security concern for systems that process untrusted international domain names.

• CVE-2026-56968LOW 3.7

  GNU SASL, a widely-used authentication library, contains a flaw in how it processes NTLM authentication challenges from servers. When a server sends a specially crafted, short challenge value, the NTLM client fails to properly sanitize the input before using it. This can leak small amounts of memory contents to an attacker who controls a malicious server. The vulnerability requires the victim to connect to an attacker-controlled server, making exploitation situational rather than worm-like, but it does represent a genuine information disclosure risk in NTLM-based authentication flows.