https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 10:04:27 +0000 https://cve.radiocsirt.org/vuln/alsa-2023:3097 <p><strong>Affected:</strong> AlmaLinux:8: gssntlmssp</p> <p>The gssntlmssp is a GSSAPI NTLM mechanism that allows to perform NTLM authentication in GSSAPI programs.</p> <p>Security Fix(es):</p> <p>* gssntlmssp: multiple out-of-bounds read when decoding NTLM fields (CVE-2023-25563) * gssntlmssp: memory corruption when decoding UTF16 strings (CVE-2023-25564) * gssntlmssp: incorrect free when decoding target information (CVE-2023-25565) * gssntlmssp: memory leak when parsing usernames (CVE-2023-25566) * gssntlmssp: out-of-bounds read when decoding target information (CVE-2023-25567)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p><strong>Affected:</strong> AlmaLinux:8: gssntlmssp</p> <p>The gssntlmssp is a GSSAPI NTLM mechanism that allows to perform NTLM authentication in GSSAPI programs.</p> <p>Security Fix(es):</p> <p>* gssntlmssp: multiple out-of-bounds read when decoding NTLM fields (CVE-2023-25563) * gssntlmssp: memory corruption when decoding UTF16 strings (CVE-2023-25564) * gssntlmssp: incorrect free when decoding target information (CVE-2023-25565) * gssntlmssp: memory leak when parsing usernames (CVE-2023-25566) * gssntlmssp: out-of-bounds read when decoding target information (CVE-2023-25567)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> https://cve.radiocsirt.org/vuln/alsa-2023:3097 https://cve.radiocsirt.org/vuln/bdu:2025-12443 bdu:2025-12443 https://cve.radiocsirt.org/vuln/bdu:2025-12443 https://cve.radiocsirt.org/vuln/euvd-2026-221572 EUVD-2026-221572 https://cve.radiocsirt.org/vuln/euvd-2026-221572 https://cve.radiocsirt.org/vuln/fkie_cve-2023-25563 <p>GSS-NTLMSSP is a mechglue plugin for the GSSAPI library that implements NTLM authentication. Prior to version 1.2.0, multiple out-of-bounds reads when decoding NTLM fields can trigger a denial of service. A 32-bit integer overflow condition can lead to incorrect checks of consistency of length of internal buffers. Although most applications will error out before accepting a singe input buffer of 4GB in length this could theoretically happen. This vulnerability can be triggered via the main `gss_accept_sec_context` entry point if the application allows tokens greater than 4GB in length. This can lead to a large, up to 65KB, out-of-bounds read which could cause a denial-of-service if it reads from unmapped memory. Version 1.2.0 contains a patch for the out-of-bounds reads.</p> <p>GSS-NTLMSSP is a mechglue plugin for the GSSAPI library that implements NTLM authentication. Prior to version 1.2.0, multiple out-of-bounds reads when decoding NTLM fields can trigger a denial of service. A 32-bit integer overflow condition can lead to incorrect checks of consistency of length of internal buffers. Although most applications will error out before accepting a singe input buffer of 4GB in length this could theoretically happen. This vulnerability can be triggered via the main `gss_accept_sec_context` entry point if the application allows tokens greater than 4GB in length. This can lead to a large, up to 65KB, out-of-bounds read which could cause a denial-of-service if it reads from unmapped memory. Version 1.2.0 contains a patch for the out-of-bounds reads.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-25563 https://cve.radiocsirt.org/vuln/gsd-2023-25563 gsd-2023-25563 https://cve.radiocsirt.org/vuln/gsd-2023-25563 https://cve.radiocsirt.org/vuln/msrc_cve-2023-25563 msrc_CVE-2023-25563 https://cve.radiocsirt.org/vuln/msrc_cve-2023-25563 https://cve.radiocsirt.org/vuln/opensuse-su-2023:0048-1 <p>Security update for gssntlmssp</p> <p>Security update for gssntlmssp</p> https://cve.radiocsirt.org/vuln/opensuse-su-2023:0048-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-25563 <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: gss-ntlmssp, Ubuntu:Pro:18.04:LTS: gss-ntlmssp, Ubuntu:Pro:20.04:LTS: gss-ntlmssp, Ubuntu:Pro:22.04:LTS: gss-ntlmssp</p> <p>GSS-NTLMSSP is a mechglue plugin for the GSSAPI library that implements NTLM authentication. Prior to version 1.2.0, multiple out-of-bounds reads when decoding NTLM fields can trigger a denial of service. A 32-bit integer overflow condition can lead to incorrect checks of consistency of length of internal buffers. Although most applications will error out before accepting a singe input buffer of 4GB in length this could theoretically happen. This vulnerability can be triggered via the main `gss_accept_sec_context` entry point if the application allows tokens greater than 4GB in length. This can lead to a large, up to 65KB, out-of-bounds read which could cause a denial-of-service if it reads from unmapped memory. Version 1.2.0 contains a patch for the out-of-bounds reads.</p> <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: gss-ntlmssp, Ubuntu:Pro:18.04:LTS: gss-ntlmssp, Ubuntu:Pro:20.04:LTS: gss-ntlmssp, Ubuntu:Pro:22.04:LTS: gss-ntlmssp</p> <p>GSS-NTLMSSP is a mechglue plugin for the GSSAPI library that implements NTLM authentication. Prior to version 1.2.0, multiple out-of-bounds reads when decoding NTLM fields can trigger a denial of service. A 32-bit integer overflow condition can lead to incorrect checks of consistency of length of internal buffers. Although most applications will error out before accepting a singe input buffer of 4GB in length this could theoretically happen. This vulnerability can be triggered via the main `gss_accept_sec_context` entry point if the application allows tokens greater than 4GB in length. This can lead to a large, up to 65KB, out-of-bounds read which could cause a denial-of-service if it reads from unmapped memory. Version 1.2.0 contains a patch for the out-of-bounds reads.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-25563 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1238 <p>Ein entfernter, anonymer oder lokaler Angreifer kann mehrere Schwachstellen in verschiedenen Komponenten von Red Hat Enterprise Linux ausnutzen, um die Vertraulichkeit, Integrität und Verfügbarkeit zu gefährden.</p> <p>Ein entfernter, anonymer oder lokaler Angreifer kann mehrere Schwachstellen in verschiedenen Komponenten von Red Hat Enterprise Linux ausnutzen, um die Vertraulichkeit, Integrität und Verfügbarkeit zu gefährden.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1238