CVE-2023-25567— GSS-NTLMSSP 缓冲区错误漏洞

GSS-NTLMSSP vulnerable to out-of-bounds read when decoding target information

GSS-NTLMSSP, a mechglue plugin for the GSSAPI library that implements NTLM authentication, has an out-of-bounds read when decoding target information prior to version 1.2.0. The length of the `av_pair` is not checked properly for two of the elements which can trigger an out-of-bound read. The out-of-bounds read can be triggered via the main `gss_accept_sec_context` entry point and could cause a denial-of-service if the memory is unmapped. The issue is fixed in version 1.2.0.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

跨界内存读

GSS-NTLMSSP 缓冲区错误漏洞

GSS-NTLMSSP是gssapi开源的一个实现 NTLM 身份验证的 GSSAPI 库的 mechglue 插件。 GSS-NTLMSSP 1.2.0之前版本存在缓冲区错误漏洞，该漏洞源于未针对可能触发越界读取的两个元素av_pair 的长度进行正确检查 ，解码目标信息时可能导致越界读取，攻击者可以通过“gss_accept_sec_context”主入口点触发该漏洞。

N/A

N/A