Phil Turnbull discovered that GSS NTLMSSP may perform out-of-bounds reads when decoding NTLM fields and target information. An attacker could possibly use this issue to cause GSS NTLMSSP to crash, resulting in a denial of service. (CVE-2023-25563, CVE-2023-25567)
Phil Turnbull discovered that GSS NTLMSSP did not properly initialize memory when decoding UTF16 strings. An attacker could possibly use this issue to trigger an out-of-bounds write, resulting in a crash. (CVE-2023-25564)
Phil Turnbull discovered that GSS NTLMSSP did not properly handle memory cleanup. An attacker could possibly use this issue to cause an assertion failure, resulting in a denial of service. (CVE-2023-25565)
{ "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro", "binaries": [ { "binary_version": "0.7.0-3~ubuntu0.16.04.1+esm1", "binary_name": "gss-ntlmssp" }, { "binary_version": "0.7.0-3~ubuntu0.16.04.1+esm1", "binary_name": "gss-ntlmssp-dbgsym" }, { "binary_version": "0.7.0-3~ubuntu0.16.04.1+esm1", "binary_name": "gss-ntlmssp-dev" } ] }
{ "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro", "binaries": [ { "binary_version": "0.7.0-4ubuntu0.18.04.1~esm1", "binary_name": "gss-ntlmssp" }, { "binary_version": "0.7.0-4ubuntu0.18.04.1~esm1", "binary_name": "gss-ntlmssp-dbgsym" }, { "binary_version": "0.7.0-4ubuntu0.18.04.1~esm1", "binary_name": "gss-ntlmssp-dev" } ] }
{ "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro", "binaries": [ { "binary_version": "0.7.0-4ubuntu0.20.04.1~esm1", "binary_name": "gss-ntlmssp" }, { "binary_version": "0.7.0-4ubuntu0.20.04.1~esm1", "binary_name": "gss-ntlmssp-dbgsym" }, { "binary_version": "0.7.0-4ubuntu0.20.04.1~esm1", "binary_name": "gss-ntlmssp-dev" } ] }
{ "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro", "binaries": [ { "binary_version": "0.7.0-4ubuntu0.22.04.1~esm1", "binary_name": "gss-ntlmssp" }, { "binary_version": "0.7.0-4ubuntu0.22.04.1~esm1", "binary_name": "gss-ntlmssp-dbgsym" }, { "binary_version": "0.7.0-4ubuntu0.22.04.1~esm1", "binary_name": "gss-ntlmssp-dev" } ] }