SUSE-SU-2019:0339-1 Security update for curl

This update for curl fixes the following issues: Security issues fixed: - CVE-2019-3822: Fixed a NTLMv2 type-3 header stack buffer overflow bsc1123377. - CVE-2019-3823: Fixed an out-of-bounds read in the SMTP end-of-response bsc1123378. - CVE-2018-16890: Fixed an out-of-bounds buffer read in NTLM...

FreeBSD : cURL -- Multiple vulnerabilities (301a01b7-d50e-11e7-ac58-b499baebfeaf)

The cURL project reports : - NTLM buffer overflow via integer overflow CVE-2017-8816libcurl contains a buffer overrun flaw in the NTLM authentication code. The internal function Curlntlmcoremkntlmv2hash sums up the lengths of the user name + password = SUM and multiplies the sum by two = SIZE to...

Curl < 7.13.1 NTLM Stack-based Buffer Overflow

Binary data 2640.prm...

Squid < 2.5.STABLE6 NTLM Buffer Overflow

Binary data 2185.prm...