Skip to content
OpenAdvisories
Medium ALSA-2023:3097 5 CVEs

Moderate: gssntlmssp security update

Published May 16, 2023 · Updated Oct 29, 2026

Ecosystem: AlmaLinux

Summary

The gssntlmssp is a GSSAPI NTLM mechanism that allows to perform NTLM authentication in GSSAPI programs.

Security Fix(es):

* gssntlmssp: multiple out-of-bounds read when decoding NTLM fields (CVE-2023-25563)
* gssntlmssp: memory corruption when decoding UTF16 strings (CVE-2023-25564)
* gssntlmssp: incorrect free when decoding target information (CVE-2023-25565)
* gssntlmssp: memory leak when parsing usernames (CVE-2023-25566)
* gssntlmssp: out-of-bounds read when decoding target information (CVE-2023-25567)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Fixed packages 1

ReleasePackageFixed in
AlmaLinux · 8 gssntlmssp 1.2.0-1.el8_8

Vulnerabilities 5

  • High 7.5
    CVE-2023-25565

    GSS-NTLMSSP vulnerable to incorrect free when decoding target information

    GSS-NTLMSSP is a mechglue plugin for the GSSAPI library that implements NTLM authentication. Prior to version 1.2.0, an incorrect free when decoding target information can trigger a denial of service. The error condition incorrectly assumes the `cb` and `sh` …

    gssapi gss-ntlmssp gss-ntlmssp gssntlmssp Debian Ubuntu Azure Linux
  • High 7.5
    CVE-2023-25566

    GSS-NTLMSSP vulnerable to memory leak when parsing usernames

    GSS-NTLMSSP is a mechglue plugin for the GSSAPI library that implements NTLM authentication. Prior to version 1.2.0, a memory leak can be triggered when parsing usernames which can trigger a denial-of-service. The domain portion of a username may be overridde…

    gssapi gss-ntlmssp gss-ntlmssp gssntlmssp Debian Azure Linux
  • High 7.5
    CVE-2023-25567

    GSS-NTLMSSP vulnerable to out-of-bounds read when decoding target information

    GSS-NTLMSSP, a mechglue plugin for the GSSAPI library that implements NTLM authentication, has an out-of-bounds read when decoding target information prior to version 1.2.0. The length of the `av_pair` is not checked properly for two of the elements which can…

    gssapi gss-ntlmssp gssntlmssp gss-ntlmssp Debian Ubuntu Azure Linux
  • Medium 6.5
    CVE-2023-25564

    GSS-NTLMSSP vulnerable to memory corruption when decoding UTF16 strings

    GSS-NTLMSSP is a mechglue plugin for the GSSAPI library that implements NTLM authentication. Prior to version 1.2.0, memory corruption can be triggered when decoding UTF16 strings. The variable `outlen` was not initialized and could cause writing a zero to an…

    gssapi gss-ntlmssp gssntlmssp gss-ntlmssp Debian Ubuntu Azure Linux
  • Medium 5.9
    CVE-2023-25563

    GSS-NTLMSSP vulnerable to multiple out-of-bounds reads when decoding NTLM fields

    GSS-NTLMSSP is a mechglue plugin for the GSSAPI library that implements NTLM authentication. Prior to version 1.2.0, multiple out-of-bounds reads when decoding NTLM fields can trigger a denial of service. A 32-bit integer overflow condition can lead to incorr…

    gssapi gss-ntlmssp gss-ntlmssp gssntlmssp Debian Ubuntu Azure Linux

References

  • report
    https://access.redhat.com/security/cve/CVE-2023-25563
  • report
    https://access.redhat.com/security/cve/CVE-2023-25564
  • report
    https://access.redhat.com/security/cve/CVE-2023-25565
  • report
    https://access.redhat.com/security/cve/CVE-2023-25566
  • report
    https://access.redhat.com/security/cve/CVE-2023-25567
  • report
    https://bugzilla.redhat.com/2172019
  • report
    https://bugzilla.redhat.com/2172020
  • report
    https://bugzilla.redhat.com/2172021
  • report
    https://bugzilla.redhat.com/2172022
  • report
    https://bugzilla.redhat.com/2172023
  • advisory
    https://errata.almalinux.org/8/ALSA-2023-3097.html