rpm package
opensuse/libesmtp&distro=openSUSE Tumbleweed
pkg:rpm/opensuse/libesmtp&distro=openSUSE%20Tumbleweed
Vulnerabilities (1)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2019-19977 | Cri | 9.8 | < 1.1.0-1.1 | 1.1.0-1.1 | Dec 26, 2019 | libESMTP through 1.0.6 mishandles domain copying into a fixed-size buffer in ntlm_build_type_2 in ntlm/ntlmstruct.c, as demonstrated by a stack-based buffer over-read. |
- affected < 1.1.0-1.1fixed 1.1.0-1.1
libESMTP through 1.0.6 mishandles domain copying into a fixed-size buffer in ntlm_build_type_2 in ntlm/ntlmstruct.c, as demonstrated by a stack-based buffer over-read.