{"id":"CVE-2019-17455","aliases":["AZL-7266","DEBIAN-CVE-2019-17455","DLA-2207-1","DLA-2831-1","EUVD-2019-7844","GHSA-m8c7-4hj3-f3m6","MGASA-2020-0219","UBUNTU-CVE-2019-17455","USN-5108-1","USN-5108-2","openSUSE-SU-2020:0806-1","openSUSE-SU-2020:0816-1","openSUSE-SU-2024:10963-1"],"status":"published","title":"Libntlm through 1.5 relies on a fixed buffer size for tSmbNtlmAuthRequest, tSmbNtlmAuthChallenge,...","description":"Libntlm through 1.5 relies on a fixed buffer size for tSmbNtlmAuthRequest, tSmbNtlmAuthChallenge, and tSmbNtlmAuthResponse read and write operations, as demonstrated by a stack-based buffer over-read in buildSmbNtlmAuthRequest in smbutil.c for a crafted NTLM request.","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.03107,"percentile":0.87865,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-120","CWE-125","CWE-787"],"published":"2019-10-10T17:17:48Z","modified":"2026-10-20T10:50:49Z","fixes":[{"ecosystem":"Azure Linux:2","package":"libntlm","fixed_in":["1.6-1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"libntlm","fixed_in":["1.6-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"libntlm","fixed_in":["1.6-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"libntlm","fixed_in":["1.6-1"],"sources":["osv"]},{"ecosystem":"Debian:8","package":"libntlm","fixed_in":["1.4-3+deb8u1"],"sources":["osv"]},{"ecosystem":"Debian:9","package":"libntlm","fixed_in":["1.4-8+deb9u1"],"sources":["osv"]},{"ecosystem":"Mageia:7","package":"libntlm","fixed_in":["1.6-1.mga7"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"libntlm","fixed_in":["1.4-1ubuntu0.1~esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"libntlm","fixed_in":["1.4-7ubuntu0.1~esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"libntlm","fixed_in":["1.4-8ubuntu0.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"libntlm","fixed_in":["1.5-2ubuntu0.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.1","package":"libntlm","fixed_in":["1.6-lp151.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Package Hub 15 SP1","package":"libntlm","fixed_in":["1.6-bp151.4.3.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Azure Linux:2","package":"libntlm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6-1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"libntlm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"libntlm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"libntlm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6-1"}]}]},{"source":"osv","ecosystem":"Debian:8","package":"libntlm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4-3+deb8u1"}]}],"versions":["1.4-3"]},{"source":"osv","ecosystem":"Debian:9","package":"libntlm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4-8+deb9u1"}]}],"versions":["1.4-8"]},{"source":"osv","ecosystem":"Mageia:7","package":"libntlm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6-1.mga7"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"libntlm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4-1ubuntu0.1~esm1"}]}],"versions":["1.4-1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"libntlm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4-7ubuntu0.1~esm1"}]}],"versions":["1.4-7"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"libntlm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4-8ubuntu0.1"}]}],"versions":["1.4-8"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"libntlm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5-2ubuntu0.1"}]}],"versions":["1.5-2"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"libntlm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4-8ubuntu0.1"}]}],"versions":["1.4-8"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"libntlm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5-2ubuntu0.1"}]}],"versions":["1.5-2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"libntlm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4-1ubuntu0.1~esm1"}]}],"versions":["1.4-1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"libntlm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4-7ubuntu0.1~esm1"}]}],"versions":["1.4-7"]},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"libntlm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6-lp151.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Package Hub 15 SP1","package":"libntlm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6-bp151.4.3.1"}]}]}],"products":[{"vendor":"canonical","product":"ubuntu_linux"},{"vendor":"debian","product":"debian_linux"},{"vendor":"fedoraproject","product":"fedora"},{"vendor":"nongnu","product":"libntlm"},{"vendor":"opensuse","product":"backports_sle"},{"vendor":"opensuse","product":"leap"}],"references":[{"url":"https://gitlab.com/jas/libntlm/issues/2","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory","evidence","report"]},{"url":"https://people.canonical.com/~ubuntu-security/cve/2019/CVE-2019-17455.html","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2019-17455","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory"]},{"url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=942145","tags":["x_refsource_MISC","x_transferred","Exploit","Issue Tracking","Mailing List","Third Party Advisory","report"]},{"url":"https://lists.debian.org/debian-lts-announce/2020/05/msg00010.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00029.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00032.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3BVFO3OVJPMSGIXBKNOCVOJZ3UTGZQF5/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YZ5YWYNOJ5HMCKAHWLTY4MXZQWJJCBI7/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://lists.debian.org/debian-lts-announce/2021/11/msg00026.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-17455","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3BVFO3OVJPMSGIXBKNOCVOJZ3UTGZQF5/"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YZ5YWYNOJ5HMCKAHWLTY4MXZQWJJCBI7/"},{"url":"https://github.com/advisories/GHSA-m8c7-4hj3-f3m6"},{"url":"https://advisories.mageia.org/MGASA-2020-0219.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=26609","tags":["report"]},{"url":"https://www.debian.org/lts/security/2020/dla-2207","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2019-17455","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-5108-1","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-17455","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-5108-2","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/7PO7Q5SGPGD6IOVLWRXG7JT6EH6C3EGX/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1153669","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2019-17455","tags":["web"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/KDNJ23HMSF5X6K3HBLX4HT3KAWPAP6X3/","tags":["advisory"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2019-17455","description":"Libntlm through 1.5 relies on a fixed buffer size for tSmbNtlmAuthRequest, tSmbNtlmAuthChallenge, and tSmbNtlmAuthResponse read and write operations, as demonstrated by a stack-based buffer over-read in buildSmbNtlmAuthRequest in smbutil.c for a crafted NTLM request.","status":"published","published":"2019-10-10T17:17:48Z","modified":"2024-08-05T01:40:15.921Z","updated_at":"2026-11-02T14:20:24.678649Z"}],"euvd":[{"id":"EUVD-2019-7844","description":"Libntlm through 1.5 relies on a fixed buffer size for tSmbNtlmAuthRequest, tSmbNtlmAuthChallenge, and tSmbNtlmAuthResponse read and write operations, as demonstrated by a stack-based buffer over-read in buildSmbNtlmAuthRequest in smbutil.c for a crafted NTLM request.","status":"published","published":"2019-10-10T17:17:48Z","modified":"2024-08-05T01:40:15Z","updated_at":"2026-11-03T02:40:29.78058Z"}],"ghsa":[{"id":"GHSA-m8c7-4hj3-f3m6","title":"Libntlm through 1.5 relies on a fixed buffer size for tSmbNtlmAuthRequest, tSmbNtlmAuthChallenge,...","description":"Libntlm through 1.5 relies on a fixed buffer size for tSmbNtlmAuthRequest, tSmbNtlmAuthChallenge, and tSmbNtlmAuthResponse read and write operations, as demonstrated by a stack-based buffer over-read in buildSmbNtlmAuthRequest in smbutil.c for a crafted NTLM request.","status":"published","published":"2022-05-24T16:58:34Z","modified":"2023-01-28T05:07:05Z","cwes":["CWE-120","CWE-125","CWE-787"],"updated_at":"2026-11-02T14:44:29.724528Z"}],"nvd":[{"id":"CVE-2019-17455","description":"Libntlm through 1.5 relies on a fixed buffer size for tSmbNtlmAuthRequest, tSmbNtlmAuthChallenge, and tSmbNtlmAuthResponse read and write operations, as demonstrated by a stack-based buffer over-read in buildSmbNtlmAuthRequest in smbutil.c for a crafted NTLM request.","status":"published","published":"2019-10-10T18:15:11.647Z","modified":"2026-06-17T02:23:59.04Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T14:05:31.019577Z"}],"osv":[{"id":"AZL-7266","title":"CVE-2019-17455 affecting package libntlm for versions less than 1.6-1","description":"Libntlm through 1.5 relies on a fixed buffer size for tSmbNtlmAuthRequest, tSmbNtlmAuthChallenge, and tSmbNtlmAuthResponse read and write operations, as demonstrated by a stack-based buffer over-read in buildSmbNtlmAuthRequest in smbutil.c for a crafted NTLM request.","status":"published","published":"2019-10-10T18:15:11Z","modified":"2026-04-21T04:36:47.078409Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:28:09.201912Z"},{"id":"CVE-2019-17455","description":"Libntlm through 1.5 relies on a fixed buffer size for tSmbNtlmAuthRequest, tSmbNtlmAuthChallenge, and tSmbNtlmAuthResponse read and write operations, as demonstrated by a stack-based buffer over-read in buildSmbNtlmAuthRequest in smbutil.c for a crafted NTLM request.","status":"published","published":"2019-10-10T18:15:11.647Z","modified":"2026-10-20T10:50:49.554517661Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:44:11.673963Z"},{"id":"DEBIAN-CVE-2019-17455","description":"Libntlm through 1.5 relies on a fixed buffer size for tSmbNtlmAuthRequest, tSmbNtlmAuthChallenge, and tSmbNtlmAuthResponse read and write operations, as demonstrated by a stack-based buffer over-read in buildSmbNtlmAuthRequest in smbutil.c for a crafted NTLM request.","status":"published","published":"2019-10-10T18:15:11.647Z","modified":"2026-09-21T07:02:29.849664456Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:45:31.867036Z"},{"id":"UBUNTU-CVE-2019-17455","description":"Libntlm through 1.5 relies on a fixed buffer size for tSmbNtlmAuthRequest, tSmbNtlmAuthChallenge, and tSmbNtlmAuthResponse read and write operations, as demonstrated by a stack-based buffer over-read in buildSmbNtlmAuthRequest in smbutil.c for a crafted NTLM request.","status":"published","published":"2019-10-10T18:15:00Z","modified":"2026-04-22T12:14:06.965216Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:54:20.325378Z"},{"id":"DLA-2207-1","title":"libntlm - security update","status":"published","published":"2020-05-10T00:00:00Z","modified":"2026-03-09T01:19:44.3263Z","updated_at":"2026-11-02T15:46:10.227108Z"},{"id":"DLA-2831-1","title":"libntlm - security update","status":"published","published":"2021-11-28T00:00:00Z","modified":"2026-03-09T01:18:27.409507Z","updated_at":"2026-11-02T15:46:11.189256Z"},{"id":"MGASA-2020-0219","title":"Updated libntlm packages fix security vulnerability","description":"Updated libntlm packages fix security vulnerability:\n\nIt was discovered that libntlm through 1.5 relies on a fixed buffer size\nfor tSmbNtlmAuthRequest, tSmbNtlmAuthChallenge, and tSmbNtlmAuthResponse\nread and write operations, as demonstrated by a stack-based buffer\nover-read in buildSmbNtlmAuthRequest in smbutil.c for a crafted NTLM\nrequest (CVE-2019-17455).\n","status":"published","published":"2020-05-24T18:04:47Z","modified":"2026-04-16T04:41:18.505109207Z","updated_at":"2026-11-02T15:49:41.151324Z"},{"id":"openSUSE-SU-2020:0806-1","title":"Security update for libntlm","description":"This update for libntlm fixes the following issues:\n\nUpdate to release 1.6:\n\n* CVE-2019-17455: Fixed a buffer overflow in buildSmbNtlmAuth* function.  (boo#1153669)\n\n","status":"published","published":"2020-06-13T10:16:51Z","modified":"2026-02-04T03:54:38.66289Z","updated_at":"2026-11-02T16:58:31.152112Z"},{"id":"openSUSE-SU-2020:0816-1","title":"Security update for libntlm","description":"This update for libntlm fixes the following issues:\n\nUpdate to release 1.6:\n\n* CVE-2019-17455: Fixed a buffer overflow in buildSmbNtlmAuth* function.  (boo#1153669)\n\n\nThis update was imported from the openSUSE:Leap:15.1:Update update project.","status":"published","published":"2020-06-13T16:56:52Z","modified":"2026-02-04T04:01:25.313934Z","updated_at":"2026-11-02T16:58:31.152112Z"},{"id":"openSUSE-SU-2024:10963-1","title":"libntlm-devel-1.6-1.8 on GA media","description":"These are all security issues fixed in the libntlm-devel-1.6-1.8 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:33:15.37301Z","updated_at":"2026-11-02T16:58:34.894275Z"},{"id":"USN-5108-1","title":"libntlm vulnerability","description":"It was discovered that Libntlm incorrectly handled specially crafted NTML\nrequests. An attacker could possibly use this issue to cause a denial of\nservice or another unspecified impact.\n","status":"published","published":"2021-10-08T13:44:28Z","modified":"2026-04-22T10:18:31.341128Z","updated_at":"2026-11-02T16:58:15.683829Z"},{"id":"USN-5108-2","title":"libntlm vulnerability","description":"USN-5108-1 fixed a vulnerability in Libntlm.\nThis update provides the corresponding update for Ubuntu 14.04 ESM and\nUbuntu 16.04 ESM.\n\nOriginal advisory details:\n\n It was discovered that Libntlm incorrectly handled specially crafted NTML\n requests. An attacker could possibly use this issue to cause a denial of\n service or another unspecified impact.\n","status":"published","published":"2022-02-15T10:22:54Z","modified":"2026-06-29T13:49:33.983083258Z","updated_at":"2026-11-02T16:58:15.683829Z"}]}}