libsoup from versions 2.65.1 until 2.68.1 have a heap-based buffer over-read because soup_ntlm_parse_challenge() in soup-auth-ntlm.c does not properly check an NTLM message's length before proceeding with a memcpy.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - libsoup from versions 2.65.1 until 2.68.1 have a heap-based buffer over-read because
    soup_ntlm_parse_challenge() in soup-auth-ntlm.c does not properly check an NTLM message's length before
    proceeding with a memcpy. (CVE-2019-17266)

An update of the libsoup package has been released.

The remote Ubuntu 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4152-1 advisory.

    It was discovered that libsoup incorrectly handled parsing certain NTLM messages. If a user or automated     system were tricked into connecting to a malicious server, a remote attacker could possibly use this issue     to cause a denial of service.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
405302	Alpine: libsoup: security update to 2.68.2-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	critical
405302	Alpine: libsoup: security update to 2.68.2-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	critical
405301	Alpine: multiple libsoup packages: security update to 2.66.2-r2	Tenable Cloud Security	Alpine Linux Local Security Checks	critical
405301	Alpine: multiple libsoup packages: security update to 2.66.2-r2	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	critical
132532	Photon OS 2.0: Libsoup PHSA-2019-2.0-0190	Nessus	PhotonOS Local Security Checks	critical
132523	Photon OS 1.0: Libsoup PHSA-2019-1.0-0257	Nessus	PhotonOS Local Security Checks	critical
129775	Ubuntu 18.04 LTS : libsoup vulnerability (USN-4152-1)	Nessus	Ubuntu Local Security Checks	critical

Detections

Analytics

CVE-2019-17266

critical

Tenable Plugins

critical

critical

critical

critical

critical

critical

critical