Cette page suit l'état du correctif pour Alpine Linux. La vulnérabilité elle-même est décrite sur la page CVE principale.
Voir CVE-2022-41318 →
ALPINE-CVE-2022-41318
A buffer over-read was discovered in libntlmauth in Squid 2.5 through 5.6. Due to incorrect integer-overflow protection, the SSPI and SMB authenticati...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
A buffer over-read was discovered in libntlmauth in Squid 2.5 through 5.6. Due to incorrect integer-overflow protection, the SSPI and SMB authentication helpers are vulnerable to reading unintended memory locations. In some configurations, cleartext credentials from these locations are sent to a client. This is fixed in 5.7.
Source: OSV.dev (Open Source Vulnerabilities) OSV
Paquets affectés
Alpine:v3.15
squid
[{"type":"ECOSYSTEM","events":[{"introduced":"2.5"},{"fixed":"5.2-r1"}]}]
Alpine:v3.16
squid
[{"type":"ECOSYSTEM","events":[{"introduced":"2.5"},{"fixed":"5.2-r1"}]}]
Références
- advisory security.alpinelinux.org