CVE-2019-19977
libESMTP through 1.0.6 mishandles domain copying into a fixed-size buffer in ntlm_build_type_2 in...
libESMTP through 1.0.6 mishandles domain copying into a fixed-size buffer in ntlm_build_type_2 in ntlm/ntlmstruct.c, as demonstrated by a stack-based buffer over-read.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
libESMTP through 1.0.6 mishandles domain copying into a fixed-size buffer in ntlm_build_type_2 in ntlm/ntlmstruct.c, as demonstrated by a stack-based buffer over-read.
- Record
CVE-2019-19977- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-125
- Updated
- 2026-11-02
CVE List No score
libESMTP through 1.0.6 mishandles domain copying into a fixed-size buffer in ntlm_build_type_2 in ntlm/ntlmstruct.c, as demonstrated by a stack-based buffer over-read.
- Record
CVE-2019-19977- Updated
- 2026-11-02
EUVDEUVD-2019-9565 No score
libESMTP through 1.0.6 mishandles domain copying into a fixed-size buffer in ntlm_build_type_2 in ntlm/ntlmstruct.c, as demonstrated by a stack-based buffer over-read.
- Record
EUVD-2019-9565- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-cxg8-9wrx-2mhp No score
libESMTP through 1.0.6 mishandles domain copying into a fixed-size buffer in ntlm_build_type_2 in...
libESMTP through 1.0.6 mishandles domain copying into a fixed-size buffer in ntlm_build_type_2 in ntlm/ntlmstruct.c, as demonstrated by a stack-based buffer over-read.
- Record
GHSA-cxg8-9wrx-2mhp- Updated
- 2026-11-02
OSVAZL-36949
CVE-2019-19977 affecting package libesmtp for versions less than 1.0.6-21
libESMTP through 1.0.6 mishandles domain copying into a fixed-size buffer in ntlm_build_type_2 in ntlm/ntlmstruct.c, as demonstrated by a stack-based buffer over-read.
- Record
AZL-36949- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-05
OSVAZL-7260
CVE-2019-19977 affecting package libesmtp for versions less than 1.0.6-21
libESMTP through 1.0.6 mishandles domain copying into a fixed-size buffer in ntlm_build_type_2 in ntlm/ntlmstruct.c, as demonstrated by a stack-based buffer over-read.
- Record
AZL-7260- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
Show 10 moreShow less
OSV
libESMTP through 1.0.6 mishandles domain copying into a fixed-size buffer in ntlm_build_type_2 in ntlm/ntlmstruct.c, as demonstrated by a stack-based buffer over-read.
- Record
CVE-2019-19977- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVDEBIAN-CVE-2019-19977
libESMTP through 1.0.6 mishandles domain copying into a fixed-size buffer in ntlm_build_type_2 in ntlm/ntlmstruct.c, as demonstrated by a stack-based buffer over-read.
- Record
DEBIAN-CVE-2019-19977- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVMGASA-2021-0503 No score
Updated libesmtp packages fix security vulnerability
libESMTP through 1.0.6 mishandles domain copying into a fixed-size buffer in ntlm_build_type_2 in ntlm/ntlmstruct.c, as demonstrated by a stack-based buffer over-read. (CVE-2019-19977)
- Record
MGASA-2021-0503- Updated
- 2026-11-02
OSVopenSUSE-SU-2021:1235-1 No score
Security update for libesmtp
This update for libesmtp fixes the following issues:
- CVE-2019-19977: Fixed stack-based buffer over-read in ntlm/ntlmstruct.c (bsc#1160462).
This update was imported from the SUSE:SLE-15:Update update project.
- Record
openSUSE-SU-2021:1235-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2021:2937-1 No score
Security update for libesmtp
This update for libesmtp fixes the following issues:
- CVE-2019-19977: Fixed stack-based buffer over-read in ntlm/ntlmstruct.c (bsc#1160462).
- Record
openSUSE-SU-2021:2937-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:12594-1 No score
libesmtp-devel-1.1.0-1.1 on GA media
These are all security issues fixed in the libesmtp-devel-1.1.0-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:12594-1- Updated
- 2026-11-02
OSVSUSE-SU-2021:14793-1 No score
Security update for libesmtp
This update for libesmtp fixes the following issues:
- CVE-2019-19977: Fixed stack-based buffer over-read in ntlm/ntlmstruct.c (bsc#1160462).
- Record
SUSE-SU-2021:14793-1- Updated
- 2026-11-02
OSVSUSE-SU-2021:2917-1 No score
Security update for libesmtp
This update for libesmtp fixes the following issues:
- CVE-2019-19977: Fix stack-based buffer over-read in ntlm/ntlmstruct.c (bsc#1160462).
- Record
SUSE-SU-2021:2917-1- Updated
- 2026-11-02
OSVSUSE-SU-2021:2937-1 No score
Security update for libesmtp
This update for libesmtp fixes the following issues:
- CVE-2019-19977: Fixed stack-based buffer over-read in ntlm/ntlmstruct.c (bsc#1160462).
- Record
SUSE-SU-2021:2937-1- Updated
- 2026-11-02
OSVSUSE-SU-2021:2937-2 No score
Security update for libesmtp
This update for libesmtp fixes the following issues:
- CVE-2019-19977: Fixed stack-based buffer over-read in ntlm/ntlmstruct.c (bsc#1160462).
- Record
SUSE-SU-2021:2937-2- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
libesmtpAzure Linux:3 |
before 1.0.6-21 | 1.0.6-21 |
libesmtpAzure Linux:2 |
before 1.0.6-21 | 1.0.6-21 |
libesmtpDebian:12 |
All versions, plus listed versions 1.1.0-31.1.0-3.11.1.0-3.1~deb12u11.1.0-3.2 |
None known |
libesmtpDebian:13 |
All versions, plus listed versions 1.1.0-3.2 |
None known |
libesmtpDebian:14 |
All versions, plus listed versions 1.1.0-3.2 |
None known |
libesmtpMageia:8 |
before 1.0.6-12.1.mga8 | 1.0.6-12.1.mga8 |
libesmtpSUSE:Linux Enterprise Point of Sale 11 SP3 |
before 1.0.4-157.18.3.1 | 1.0.4-157.18.3.1 |
libesmtpSUSE:Linux Enterprise Server 11 SP4-LTSS |
before 1.0.4-157.18.3.1 | 1.0.4-157.18.3.1 |
libesmtpSUSE:HPE Helion OpenStack 8 |
before 1.0.6-17.3.1 | 1.0.6-17.3.1 |
libesmtpSUSE:OpenStack Cloud 8 |
before 1.0.6-17.3.1 | 1.0.6-17.3.1 |
Show 32 moreShow less
| Package | Affected | Fixed |
|---|---|---|
libesmtpSUSE:OpenStack Cloud 9 |
before 1.0.6-17.3.1 | 1.0.6-17.3.1 |
libesmtpSUSE:OpenStack Cloud Crowbar 8 |
before 1.0.6-17.3.1 | 1.0.6-17.3.1 |
libesmtpSUSE:OpenStack Cloud Crowbar 9 |
before 1.0.6-17.3.1 | 1.0.6-17.3.1 |
libesmtpSUSE:Linux Enterprise Server for SAP Applications 12 SP3 |
before 1.0.6-17.3.1 | 1.0.6-17.3.1 |
libesmtpSUSE:Linux Enterprise Server for SAP Applications 12 SP4 |
before 1.0.6-17.3.1 | 1.0.6-17.3.1 |
libesmtpSUSE:Linux Enterprise Software Development Kit 12 SP5 |
before 1.0.6-17.3.1 | 1.0.6-17.3.1 |
libesmtpSUSE:Linux Enterprise Server 12 SP2-BCL |
before 1.0.6-17.3.1 | 1.0.6-17.3.1 |
libesmtpSUSE:Linux Enterprise Server 12 SP3-LTSS |
before 1.0.6-17.3.1 | 1.0.6-17.3.1 |
libesmtpSUSE:Linux Enterprise Server 12 SP3-BCL |
before 1.0.6-17.3.1 | 1.0.6-17.3.1 |
libesmtpSUSE:Linux Enterprise Server 12 SP4-LTSS |
before 1.0.6-17.3.1 | 1.0.6-17.3.1 |
libesmtpSUSE:Linux Enterprise Server 12 SP5 |
before 1.0.6-17.3.1 | 1.0.6-17.3.1 |
libesmtpSUSE:Linux Enterprise Server for SAP Applications 12 SP5 |
before 1.0.6-17.3.1 | 1.0.6-17.3.1 |
libesmtpSUSE:Linux Enterprise Module for Basesystem 15 SP2 |
before 1.0.6-150.4.1 | 1.0.6-150.4.1 |
libesmtpSUSE:Linux Enterprise Module for Basesystem 15 SP3 |
before 1.0.6-150.4.1 | 1.0.6-150.4.1 |
libesmtpSUSE:Linux Enterprise High Performance Computing 15-ESPOS |
before 1.0.6-150.4.1 | 1.0.6-150.4.1 |
libesmtpSUSE:Linux Enterprise High Performance Computing 15-LTSS |
before 1.0.6-150.4.1 | 1.0.6-150.4.1 |
libesmtpSUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS |
before 1.0.6-150.4.1 | 1.0.6-150.4.1 |
libesmtpSUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS |
before 1.0.6-150.4.1 | 1.0.6-150.4.1 |
libesmtpSUSE:Linux Enterprise Server 15-LTSS |
before 1.0.6-150.4.1 | 1.0.6-150.4.1 |
libesmtpSUSE:Linux Enterprise Server 15 SP1-BCL |
before 1.0.6-150.4.1 | 1.0.6-150.4.1 |
libesmtpSUSE:Linux Enterprise Server 15 SP1-LTSS |
before 1.0.6-150.4.1 | 1.0.6-150.4.1 |
libesmtpSUSE:Linux Enterprise Server for SAP Applications 15 |
before 1.0.6-150.4.1 | 1.0.6-150.4.1 |
libesmtpSUSE:Linux Enterprise Server for SAP Applications 15 SP1 |
before 1.0.6-150.4.1 | 1.0.6-150.4.1 |
libesmtpSUSE:Manager Proxy 4.0 |
before 1.0.6-150.4.1 | 1.0.6-150.4.1 |
libesmtpSUSE:Manager Retail Branch Server 4.0 |
before 1.0.6-150.4.1 | 1.0.6-150.4.1 |
libesmtpSUSE:Manager Server 4.0 |
before 1.0.6-150.4.1 | 1.0.6-150.4.1 |
libesmtpSUSE:Linux Enterprise Micro 5.0 |
before 1.0.6-150.4.1 | 1.0.6-150.4.1 |
libesmtpSUSE:Enterprise Storage 6 |
before 1.0.6-150.4.1 | 1.0.6-150.4.1 |
libesmtpSUSE:Linux Enterprise Micro 5.1 |
before 1.0.6-150.4.1 | 1.0.6-150.4.1 |
libesmtpopenSUSE:Leap 15.2 |
before 1.0.6-lp152.4.3.1 | 1.0.6-lp152.4.3.1 |
libesmtpopenSUSE:Leap 15.3 |
before 1.0.6-150.4.1 | 1.0.6-150.4.1 |
libesmtpopenSUSE:Tumbleweed |
before 1.1.0-1.1 | 1.1.0-1.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | OSV | |
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2019-19977 is a critical vulnerability (CVSS 9.8) in Libesmtp Project Libesmtp, published December 26, 2019. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.97%, the 87th percentile. Fixed in libesmtp 1.0.6-21.
References
github.com/Kirin-say/Vulnerabilities/blob/master/Stack_Overflow_in_libesmtp.md
web.archive.org/web/20190528215510/http://brianstafford.info/libesmtp
nvd.nist.gov/vuln/detail/CVE-2019-19977
security-tracker.debian.org/tracker/CVE-2019-19977
Show 12 moreShow less
advisories.mageia.org/MGASA-2021-0503.html
bugs.mageia.org/show_bug.cgi?id=29416
lists.suse.com/pipermail/sle-security-updates/2021-August/009358.html
lists.opensuse.org/archives/list/[email protected]/thread/TGZ4L5IPYNOJTWC7WZTAMPSFHIGKXQAE
suse.com/support/update/announcement/2021/suse-su-202114793-1
bugzilla.suse.com/1160462