Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

altlinux логотип

ALT-PU-2019-2849

Критический

ALT-PU-2019-2849: package libsoup update to version 2.68.2-alt1

Источник
errata.altlinux.org
Дата публикации
10.10.2019
Дата обновления
10.10.2019
Устраненные уязвимости
2
ALT Linux branch p11
ALT Container
ALT Education
ALT Workstation
ALT Workstation K
ALT Server
ALT Virtualization PVE Edition
ALT Linux branch p10
ALT Server
ALT Virtualization Server
ALT Workstation
ALT Workstation K
ALT Education
Simply Linux
Starterkit
ALT Container

Описание

This update upgrades libsoup to version 2.68.2-alt1.

Устраненные уязвимости2

Ссылки1

ALT-PU-2019-2849https://errata.altlinux.org/ALT-PU-2019-2849

Связанные уязвимости

ubuntu логотип

CVE-2019-17266

CVSS3: 9.8
ubuntu
около 7 лет назад

libsoup from versions 2.65.1 until 2.68.1 have a heap-based buffer over-read because soup_ntlm_parse_challenge() in soup-auth-ntlm.c does not properly check an NTLM message's length before proceeding with a memcpy.

redhat логотип

CVE-2019-17266

CVSS3: 8.2
redhat
около 7 лет назад

libsoup from versions 2.65.1 until 2.68.1 have a heap-based buffer over-read because soup_ntlm_parse_challenge() in soup-auth-ntlm.c does not properly check an NTLM message's length before proceeding with a memcpy.

nvd логотип

CVE-2019-17266

CVSS3: 9.8
nvd
около 7 лет назад

libsoup from versions 2.65.1 until 2.68.1 have a heap-based buffer over-read because soup_ntlm_parse_challenge() in soup-auth-ntlm.c does not properly check an NTLM message's length before proceeding with a memcpy.

debian логотип

CVE-2019-17266

CVSS3: 9.8
debian
около 7 лет назад

libsoup from versions 2.65.1 until 2.68.1 have a heap-based buffer ove ...

github логотип

GHSA-wcxh-xxc8-v5j8

CVSS3: 9.8
github
больше 4 лет назад

libsoup through 2.68.1 has a heap-based buffer over-read because soup_ntlm_parse_challenge() in soup-auth-ntlm.c does not properly check an NTLM message's length before proceeding with a memcpy.