Bug 858848 (CVE-2022-2469)

Summary:	<net-misc/gsasl-2.0.1: Out of bounds read
Product:	Gentoo Security	Reporter:	Sam James <sam>
Component:	Vulnerabilities	Assignee:	Gentoo Security <security>
Status:	IN_PROGRESS ---
Severity:	minor	CC:	maintainer-needed
Priority:	Normal
Version:	unspecified
Hardware:	All
OS:	Linux
Whiteboard:	B3 [glsa? cleanup]
Package list:		Runtime testing required:	---
Bug Depends on:	853631, 853634, 853637
Bug Blocks:

Description Sam James archtester

2022-07-18 18:04:47 UTC

From https://lists.gnu.org/archive/html/info-gnu/2022-07/msg00003.html:
"""
** GSSAPI server: Fix out-of-bounds read.
A malicious client can after it has authenticated with Kerberos send a
specially crafted message that causes Libgsasl to read out of bounds
and cause a crash in the server.
"""