CVE-2019-17455
Fixed in a distro release EPSS 3%
Libntlm through 1.5 relies on a fixed buffer size for tSmbNtlmAuthRequest, tSmbNtlmAuthChallenge, and tSmbNtlmAuthResponse read and write operations, as demonstrated by a stack-based buffer over-read in buildSmbNtlmAuthRequest in smbutil.c for a crafted NTLM request.
Products: nongnu libntlm, debian_linux, canonical ubuntu_linux, fedoraproject fedora, opensuse backports_sle, opensuse leap
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | libntlm | 1.6-1 |
| Debian 13 | libntlm | 1.6-1 |
| Debian 14 | libntlm | 1.6-1 |
| Debian 8 | libntlm | 1.4-3+deb8u1 |
| Debian 9 | libntlm | 1.4-8+deb9u1 |
| SUSE Package Hub 15 SP1 | libntlm | 1.6-bp151.4.3.1 |
| Ubuntu 18.04 LTS | libntlm | 1.4-8ubuntu0.1 |
| Ubuntu 20.04 LTS | libntlm | 1.5-2ubuntu0.1 |
| Ubuntu Pro 14.04 LTS | libntlm | 1.4-1ubuntu0.1~esm1 |
| Ubuntu Pro 16.04 LTS | libntlm | 1.4-7ubuntu0.1~esm1 |
| openSUSE Leap 15.1 | libntlm | 1.6-lp151.3.3.1 |