4 matches found
gssntlmssp: memory corruption when decoding UTF16 strings
A flaw was found in GSS-NTLMSSP, a mechglue plugin for the GSSAPI library that implements NTLM authentication. Memory corruption can be triggered when decoding UTF16 strings. The variable outlen was not initialized and could cause writing a zero to an arbitrary place in memory if the ntlmstrconve...
8.2CVSS5.8AI score0.01942EPSS
SaveExploits0References5
20