libcurl.so is vulnerable to remote code execution (RCE). An improper bounds check in the function that creates an outgoing NTLM type-3 header (lib/vauth/ntlm.c:Curl_auth_create_ntlm_type3_message()
) results in a stack-based buffer overflow when a very large nt response
data is extracted from a previous NTLMv2 header, allowing a remote attacker to exploit the vulnerability to execute arbitrary code, or crash the application.
www.securityfocus.com/bid/106950
access.redhat.com/errata/RHSA-2019:3701
bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3822
cert-portal.siemens.com/productcert/pdf/ssa-436177.pdf
curl.haxx.se/docs/CVE-2019-3822.html
lists.apache.org/thread.html/8338a0f605bdbb3a6098bb76f666a95fc2b2f53f37fa1ecc89f1146f@%3Cdevnull.infra.apache.org%3E
security.gentoo.org/glsa/201903-03
security.netapp.com/advisory/ntap-20190315-0001/
security.netapp.com/advisory/ntap-20190719-0004/
support.f5.com/csp/article/K84141449
support.f5.com/csp/article/K84141449?utm_source=f5support&utm_medium=RSS
usn.ubuntu.com/3882-1/
www.debian.org/security/2019/dsa-4386
www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html
www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html