Remote Code Execution

vault:edge is vulnerable to remote code execution. A flaw was found in the libntlm NTLM library where it was vulnerable to a buffer overflow in the buildSmbNtlmAuthRequestuserlen function. If an application using this library does not check input length before calling the function, an attacker...

CVE-2019-17455

A flaw was found in the libntlm NTLM library where it was vulnerable to a buffer overflow in the buildSmbNtlmAuthRequestuserlen function. If an application using this library does not check input length before calling the function, an attacker could use this flaw to send a specially crafted reque...