You are using an out of date browser. It may not display this or other websites correctly. You should upgrade or use an alternative browser.
gssapi security contexts
About this tag
The tag gssapi security contexts covers discussions about the Generic Security Services Application Programming Interface (GSSAPI) and its role in authentication and security context management, particularly in relation to Kerberos and Windows environments. Content under this tag includes analysis of vulnerabilities such as CVE-2026-40355, a denial-of-service flaw in MIT Kerberos 5 that affects applications accepting GSSAPI security contexts when a NegoEx mechanism is registered. The tag also touches on configuration considerations for GSSAPI in enterprise IT, including how improper setup can lead to operational disruptions. Topics are relevant for system administrators and security professionals managing authentication services.
CVE-2026-40355 is a denial-of-service flaw disclosed in MIT Kerberos 5 before version 1.22.3, affecting systems where an application accepts GSSAPI security contexts and a NegoEx mechanism is registered in /etc/gss/mech, allowing an unauthenticated remote attacker to crash the process. The bug...