CVE-2019-17455 (https://nvd.nist.gov/vuln/detail/CVE-2019-17455): Libntlm through 1.5 relies on a fixed buffer size for tSmbNtlmAuthRequest, tSmbNtlmAuthChallenge, and tSmbNtlmAuthResponse read and write operations, as demonstrated by a stack-based buffer over-read in buildSmbNtlmAuthRequest in smbutil.c for a crafted NTLM request.
The bug has been referenced in the following commit(s): https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=ddde72881ac2e304d026697e581bc4e621977ad4 commit ddde72881ac2e304d026697e581bc4e621977ad4 Author: Sam James <sam@gentoo.org> AuthorDate: 2020-07-19 00:31:02 +0000 Commit: Sam James <sam@gentoo.org> CommitDate: 2020-07-19 00:35:27 +0000 net-libs/libntlm: security bump to 1.6 Bug: https://bugs.gentoo.org/717944 Package-Manager: Portage-2.3.103, Repoman-2.3.23 Signed-off-by: Sam James <sam@gentoo.org> net-libs/libntlm/Manifest | 1 + net-libs/libntlm/libntlm-1.6.ebuild | 23 +++++++++++++++++++++++ 2 files changed, 24 insertions(+)
arm64 stable
arm stable
x86 stable
ppc stable
amd64 stable
ppc64 stable
sparc stable
s390 stable
hppa: ping
GLSA vote: no
dropped to ~hppa
Needs cleanup.
The bug has been referenced in the following commit(s): https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=6c4218ab25dcb10fe03a93ae8e889c024783d1d5 commit 6c4218ab25dcb10fe03a93ae8e889c024783d1d5 Author: Sam James <sam@gentoo.org> AuthorDate: 2020-07-29 00:19:21 +0000 Commit: Sam James <sam@gentoo.org> CommitDate: 2020-07-29 00:19:37 +0000 net-libs/libntlm: security cleanup Bug: https://bugs.gentoo.org/717944 Package-Manager: Portage-3.0.1, Repoman-2.3.23 Signed-off-by: Sam James <sam@gentoo.org> net-libs/libntlm/Manifest | 1 - net-libs/libntlm/libntlm-1.4.ebuild | 14 -------------- 2 files changed, 15 deletions(-)
