Lucene search
+L

1 matches found

OSV
OSV
added 2019/10/10 6:15 p.m.11 views

AZL-7266 CVE-2019-17455 affecting package libntlm for versions less than 1.6-1

Libntlm through 1.5 relies on a fixed buffer size for tSmbNtlmAuthRequest, tSmbNtlmAuthChallenge, and tSmbNtlmAuthResponse read and write operations, as demonstrated by a stack-based buffer over-read in buildSmbNtlmAuthRequest in smbutil.c for a crafted NTLM request...

9.8CVSS6.1AI score0.03107EPSS
SaveExploits1References1
Rows per page
Query Builder