MGASA-2023-0108

Source
https://advisories.mageia.org/MGASA-2023-0108.html
Import Source
https://advisories.mageia.org/MGASA-2023-0108.json
JSON Data
https://api.test.osv.dev/v1/vulns/MGASA-2023-0108
Related
Published
2023-03-24T05:55:49Z
Modified
2023-03-24T04:42:29Z
Summary
Updated gssntlmssp packages fix security vulnerability
Details

Multiple out-of-bounds read when decoding NTLM fields. (CVE-2023-25563) Memory corruption when decoding UTF16 strings. (CVE-2023-25564) Incorrect free when decoding target information. (CVE-2023-25565) Memory leak when parsing usernames. (CVE-2023-25566) Out-of-bounds read when decoding target information. (CVE-2023-25567)

References
Credits

Affected packages