Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 543
Alerts This Week
Warning Icon 1 543

Ubuntu 20.04: USN-5108-1 Moderate: Libntlm Denial of Service

ubuntu
Calendar Grey October 8, 2021
Dist Ubuntu Esm H88
Debian Security Bulletin DSN-4509-1 reveals a vulnerability in libxyz, posing risks of service disruption and code execution. Update your system promptly
libntlm could be made to crash or possibly execute arbitrary code.

Summary

libntlm could be made to crash or possibly execute arbitrary code.

Software Description:

- libntlm: NTLM authentication library

Details:

It was discovered that Libntlm incorrectly handled specially crafted NTML

requests. An attacker could possibly use this issue to cause a denial of

service or another unspecified impact.

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 20.04 LTS:
  libntlm0                        1.5-2ubuntu0.1

Ubuntu 18.04 LTS:
  libntlm0                        1.4-8ubuntu0.1

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-5108-1

CVE-2019-17455

October 08, 2021

Package Information

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.