CVE-2026-123975: Grid Community Toolkit globus-gss-assist before 12.9 Pre-Authentication Heap Out-of-Bounds Write
Grid Community Toolkit before 6.2.20261111 (globus-gss-assist before 12.9) contains a heap out-of-bounds write in globusgssassisttokengetfd() triggered by SSLv2 record lengths below 3. Remote unauthenticated clients can send a crafted GSI handshake record to services like globus-gatekeeper and myproxy to corrupt heap memory and crash the service.
Affected Software
Event History
Frequently Asked Questions
Which deployments are exposed?
Services that use the affected globus-gss-assist code to process GSI handshakes, including globus-gatekeeper and myproxy, are exposed if they run Grid Community Toolkit versions before 6.2.20261111 or globus-gss-assist versions before 12.9.
What does an attacker need to exploit this issue?
An attacker needs only network access to a vulnerable service that accepts GSI handshakes. No authentication or user interaction is required; exploitation involves sending a crafted handshake record with an SSLv2 record length below 3.
What is the impact described for successful exploitation?
The crafted record causes heap memory corruption through an out-of-bounds write and can crash the affected service. The provided data does not establish impacts beyond service disruption.
What should be done if a patch cannot be applied immediately?
The available data does not specify a workaround. Limiting network access to affected GSI-handshake services would reduce exposure, but this is not identified as a vendor-provided mitigation.