rpm package
suse/libesmtp&distro=SUSE Linux Enterprise Server 15-LTSS
pkg:rpm/suse/libesmtp&distro=SUSE%20Linux%20Enterprise%20Server%2015-LTSS
Vulnerabilities (1)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2019-19977 | Cri | 9.8 | < 1.0.6-150.4.1 | 1.0.6-150.4.1 | Dec 26, 2019 | libESMTP through 1.0.6 mishandles domain copying into a fixed-size buffer in ntlm_build_type_2 in ntlm/ntlmstruct.c, as demonstrated by a stack-based buffer over-read. |
- affected < 1.0.6-150.4.1fixed 1.0.6-150.4.1
libESMTP through 1.0.6 mishandles domain copying into a fixed-size buffer in ntlm_build_type_2 in ntlm/ntlmstruct.c, as demonstrated by a stack-based buffer over-read.