Most recent entries from all

ALSA-2023:3097 — Moderate: gssntlmssp security update

Affected: AlmaLinux:8: gssntlmssp

The gssntlmssp is a GSSAPI NTLM mechanism that allows to perform NTLM authentication in GSSAPI programs.

Security Fix(es):

* gssntlmssp: multiple out-of-bounds read when decoding NTLM fields (CVE-2023-25563) * gssntlmssp: memory corruption when decoding UTF16 strings (CVE-2023-25564) * gssntlmssp: incorrect free when decoding target information (CVE-2023-25565) * gssntlmssp: memory leak when parsing usernames (CVE-2023-25566) * gssntlmssp: out-of-bounds read when decoding target information (CVE-2023-25567)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

bdu:2025-12799

EUVD-2026-221571

fkie_cve-2023-25564

GSS-NTLMSSP is a mechglue plugin for the GSSAPI library that implements NTLM authentication. Prior to version 1.2.0, memory corruption can be triggered when decoding UTF16 strings. The variable `outlen` was not initialized and could cause writing a zero to an arbitrary place in memory if `ntlm_str_convert()` were to fail, which would leave `outlen` uninitialized. This can lead to a denial of service if the write hits unmapped memory or randomly corrupts a byte in the application memory space. This vulnerability can trigger an out-of-bounds write, leading to memory corruption. This vulnerability can be triggered via the main `gss_accept_sec_context` entry point. This issue is fixed in version 1.2.0.

gsd-2023-25564

msrc_CVE-2023-25564 — GSS-NTLMSSP vulnerable to memory corruption when decoding UTF16 strings

msrc_CVE-2023-25564

OESA-2023-1116 — gssntlmssp security update

Affected: openEuler:20.03-LTS-SP1: gssntlmssp, openEuler:20.03-LTS-SP3: gssntlmssp, openEuler:22.03-LTS: gssntlmssp, openEuler:22.03-LTS-SP1: gssntlmssp

Implementing the GSSAPI mechanism of NTLMSSP. Security Fix(es): GSS-NTLMSSP is a mechglue plugin for the GSSAPI library that implements NTLM authentication. Prior to version 1.2.0, memory corruption can be triggered when decoding UTF16 strings. The variable `outlen` was not initialized and could cause writing a zero to an arbitrary place in memory if `ntlm_str_convert()` were to fail, which would leave `outlen` uninitialized. This can lead to a denial of service if the write hits unmapped memory or randomly corrupts a byte in the application memory space. This vulnerability can trigger an out-of-bounds write, leading to memory corruption. This vulnerability can be triggered via the main `gss_accept_sec_context` entry point. This issue is fixed in version 1.2.0.(CVE-2023-25564) GSS-NTLMSSP is a mechglue plugin for the GSSAPI library that implements NTLM authentication. Prior to version 1.2.0, an incorrect free when decoding target information can trigger a denial of service. The error condition incorrectly assumes the `cb` and `sh` buffers contain a copy of the data that needs to be freed. However, that is not the case. This vulnerability can be triggered via the main `gss_accept_sec_context` entry point. This will likely trigger an assertion failure in `free`, causing a denial-of-service. This issue is fixed in version 1.2.0.(CVE-2023-25565) GSS-NTLMSSP, a mechglue plugin for the GSSAPI library that implements NTLM authentication, has an out-of-bounds read when d…

openSUSE-SU-2023:0048-1 — Security update for gssntlmssp

Security update for gssntlmssp

UBUNTU-CVE-2023-25564

Affected: Ubuntu:Pro:16.04:LTS: gss-ntlmssp, Ubuntu:Pro:18.04:LTS: gss-ntlmssp, Ubuntu:Pro:20.04:LTS: gss-ntlmssp, Ubuntu:Pro:22.04:LTS: gss-ntlmssp

WID-SEC-W-2023-1238 — Red Hat Enterprise Linux: Mehrere Schwachstellen in verschiedenen Komponenten

Ein entfernter, anonymer oder lokaler Angreifer kann mehrere Schwachstellen in verschiedenen Komponenten von Red Hat Enterprise Linux ausnutzen, um die Vertraulichkeit, Integrität und Verfügbarkeit zu gefährden.