CVE-2019-17266

libsoup from versions 2.65.1 until 2.68.1 have a heap-based buffer over-read because soupntlmparsechallenge in soup-auth-ntlm.c does not properly check an NTLM message's length before proceeding with a memcpy...

DEBIAN-CVE-2019-17266

libsoup from versions 2.65.1 until 2.68.1 have a heap-based buffer over-read because soupntlmparsechallenge in soup-auth-ntlm.c does not properly check an NTLM message's length before proceeding with a memcpy...

CVE-2019-17266

CVE-2019-17266 affects Libsoup (versions 2.65.1–2.68.1) with a heap-based buffer over-read caused by an insufficient length check in soup_ntlm_parse_challenge() before a memcpy. This could enable a remote attacker to trigger a denial of service; CVSS3/10 scores indicate high to critical impact on...

CVE-2019-17266

libsoup from versions 2.65.1 until 2.68.1 have a heap-based buffer over-read because soupntlmparsechallenge in soup-auth-ntlm.c does not properly check an NTLM message's length before proceeding with a memcpy...