CVE-2026-91926
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
Summary
A flaw was found in gss-ntlmssp. A memory leak occurs in the NTLM target-info parser when a crafted NTLM CHALLENGE message contains duplicated string-valued AV_PAIR entries. The parser allocates memory for each string value but does not free the previous allocation when the same AV_PAIR type appears more than once, leaking the earlier allocation. A malicious or man-in-the-middle server can exploit this to cause gradual memory exhaustion on the client during NTLM authentication, leading to a denial of service.
Affected Software
| Vendor | Product | Version Range | Status |
|---|
Weaknesses
- CWE-401: Missing Release of Memory after Effective Lifetime
Workarounds
No mitigation is currently available that meets Red Hat Product Security's standards for usability, deployment, applicability, or stability.
References
- https://access.redhat.com/security/cve/CVE-2026-91926
- https://bugzilla.redhat.com/show_bug.cgi?id=2533698
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.