Alerts This Week
Warning Icon 1 540
Alerts This Week
Warning Icon 1 540

Mageia: 2020-0219 Critical: Libntlm Buffer Overflow Advisory

mageia
Calendar Grey May 24, 2020
Dist Mageia Esm H88
A crucial security patch for libntlm resolves significant buffer overflow vulnerabilities present in Mageia distributions. Further information and sources are provided.
Updated libntlm packages fix security vulnerability: It was discovered that libntlm through 1.5 relies on a fixed buffer size for tSmbNtlmAuthRequest, tSmbNtlmAuthChallenge, and t...

Summary

Updated libntlm packages fix security vulnerability:
It was discovered that libntlm through 1.5 relies on a fixed buffer size for tSmbNtlmAuthRequest, tSmbNtlmAuthChallenge, and tSmbNtlmAuthResponse read and write operations, as demonstrated by a stack-based buffer over-read in buildSmbNtlmAuthRequest in smbutil.c for a crafted NTLM request (CVE-2019-17455).

References

- https://bugs.mageia.org/show_bug.cgi?id=26609

- https://lists.debian.org/debian-lts-announce/2020/05/msg00010.html

- https://www.cve.org/CVERecord?id=CVE-2019-17455

Topics%20covered

Topics Covered

security advisory security issue update buffer overflow critical Mageia libntlm

Resolution

SRPMS

- 7/core/libntlm-1.6-1.mga7

Severity
critical
Lowest
Low
Medium
High
Critical

Publication date: 24 May 2020
URL: https://advisories.mageia.org/MGASA-2020-0219.html
Type: security
CVE: CVE-2019-17455

Topics%20covered

Topics Covered

security advisory security issue update buffer overflow critical Mageia libntlm

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here