CVE-2019-17455
libntlm: stack-based buffer overflow in buildSmbNtlmAuthRequest in smbutil.c
Libntlm through 1.5 relies on a fixed buffer size for tSmbNtlmAuthRequest, tSmbNtlmAuthChallenge, and tSmbNtlmAuthResponse read and write operations, as demonstrated by a stack-based buffer over-read in buildSmbNtlmAuthRequest in smbutil.c for a crafted NTLM request.
CVSS 3.1 · 9.8 Critical
EPSS 3.1%
KEV · Not listed
Vendors
Products