CVE-2019-19977

CVE-2019-19977 affects libesmtp up to version 1.0.6, due to a stack-based buffer over-read in ntlm_build_type_2 (ntlm/ntlmstruct.c) that mishandles domain copying. Several connected sources confirm the vulnerability and indicate a fix is available in vendor advisories and OS patches (e.g., Mageia...