Summary
It was discovered that libsoup incorrectly handled parsing certain NTLM
messages. If a user or automated system were tricked into connecting to a
malicious server, a remote attacker could possibly use this issue to cause
a denial of service.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 18.04 LTS 18.04:LTS | libsoup2.4 | 2.62.1-1ubuntu0.4 |
Vulnerabilities 1
-
Unscored —
libsoup from versions 2.65.1 until 2.68.1 have a heap-based buffer over-read because soup_ntlm_parse_challenge() in sou…
References
-
report
https://ubuntu.com/security/CVE-2019-17266