Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

openSUSE-SU-2021:2937-1

Опубликовано: 03 сент. 2021
Источник: suse-cvrf

Описание

Security update for libesmtp

This update for libesmtp fixes the following issues:

  • CVE-2019-19977: Fixed stack-based buffer over-read in ntlm/ntlmstruct.c (bsc#1160462).

Список пакетов

openSUSE Leap 15.3
libesmtp-1.0.6-150.4.1
libesmtp-devel-1.0.6-150.4.1

Ссылки

Описание

libESMTP through 1.0.6 mishandles domain copying into a fixed-size buffer in ntlm_build_type_2 in ntlm/ntlmstruct.c, as demonstrated by a stack-based buffer over-read.

Затронутые продукты
openSUSE Leap 15.3:libesmtp-1.0.6-150.4.1
openSUSE Leap 15.3:libesmtp-devel-1.0.6-150.4.1
Ссылки