Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2021:14793-1

Опубликовано: 25 авг. 2021
Источник: suse-cvrf

Описание

Security update for libesmtp

This update for libesmtp fixes the following issues:

  • CVE-2019-19977: Fixed stack-based buffer over-read in ntlm/ntlmstruct.c (bsc#1160462).

Список пакетов

SUSE Linux Enterprise Point of Sale 11 SP3
libesmtp-1.0.4-157.18.3.1
SUSE Linux Enterprise Server 11 SP4-LTSS
libesmtp-1.0.4-157.18.3.1

Ссылки

Описание

libESMTP through 1.0.6 mishandles domain copying into a fixed-size buffer in ntlm_build_type_2 in ntlm/ntlmstruct.c, as demonstrated by a stack-based buffer over-read.

Затронутые продукты
SUSE Linux Enterprise Point of Sale 11 SP3:libesmtp-1.0.4-157.18.3.1
SUSE Linux Enterprise Server 11 SP4-LTSS:libesmtp-1.0.4-157.18.3.1
Ссылки