Filtered by vendor Grid Community Forum
Subscriptions
Total
1 CVE
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-123975 | 1 Grid Community Forum | 2 Globus-gss-assist, Grid Community Toolkit | 2026-11-14 | 7.5 High |
| Grid Community Toolkit before 6.2.20261111 (globus-gss-assist before 12.9) contains a heap out-of-bounds write in globus_gss_assist_token_get_fd() triggered by SSLv2 record lengths below 3. Remote unauthenticated clients can send a crafted GSI handshake record to services like globus-gatekeeper and myproxy to corrupt heap memory and crash the service. | ||||
Page 1 of 1.