Alerts This Week
Warning Icon 1 692
Alerts This Week
Warning Icon 1 692

Mageia 8 MGASA-2021-0503 Moderate: Libesmtp Buffer Over-Read

mageia
Calendar Grey November 10, 2021
Dist Mageia Esm H88
Mageia 2023-08-12 updates libssl to rectify a critical vulnerability, reinforcing overall system safety. Discover further details here.
libESMTP through 1.0.6 mishandles domain copying into a fixed-size buffer in ntlm_build_type_2 in ntlm/ntlmstruct.c, as demonstrated by a stack-based buffer over-read

Summary

libESMTP through 1.0.6 mishandles domain copying into a fixed-size buffer in ntlm_build_type_2 in ntlm/ntlmstruct.c, as demonstrated by a stack-based buffer over-read. (CVE-2019-19977)

References

- https://bugs.mageia.org/show_bug.cgi?id=29416

- https://lists.suse.com/pipermail/sle-security-updates/2021-August/009358.html

-

- https://www.cve.org/CVERecord?id=CVE-2019-19977

Resolution

SRPMS

- 8/core/libesmtp-1.0.6-12.1.mga8

Publication date: 10 Nov 2021
URL: https://advisories.mageia.org/MGASA-2021-0503.html
Type: security
CVE: CVE-2019-19977

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here