There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - libsoup from versions 2.65.1 until 2.68.1 have a heap-based buffer over-read because
    soup_ntlm_parse_challenge() in soup-auth-ntlm.c does not properly check an NTLM message's length before
    proceeding with a memcpy. (CVE-2019-17266)

发现 libsoup 未能正确处理某些 NTLM 消息的解析。如果用户或自动化系统受到诱骗连接到恶意服务器，远程攻击者可利用此问题造成拒绝服务。

请注意，Tenable Network Security 已直接从 Ubuntu 安全公告中提取上述描述块。Tenable 已尝试在不引入其他问题的情况下，尽可能进行自动清理和排版。

據發現，libsoup 未正確處理某些 NTLM 訊息的剖析。如果使用者或自動化系統遭誘騙而連線至惡意伺服器，遠端攻擊者可能利用此問題造成拒絕服務。

請注意，Tenable Network Security 已直接從 Ubuntu 安全性公告擷取前述描述區塊。Tenable 已盡量在不造成其他問題的前提下，嘗試自動清理並將其格式化。

libsoupが特定のNTLMメッセージの解析を不適切に処理することがわかりました。ユーザーまたは自動化システムが誘導され、悪意のあるサーバーに接続した場合、リモートの攻撃者がこの問題を利用して、サービス拒否を引き起こす可能性があります。

注意: Tenable Network Security は、前述の説明ブロックを Ubuntu セキュリティアドバイザリからすでに直接抽出しています。Tenable では、新たな問題を持ち込まずに、できる限り自動的に整理して書式設定するようにしています。

An update of the libsoup package has been released.

The remote Ubuntu 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4152-1 advisory.

    It was discovered that libsoup incorrectly handled parsing certain NTLM messages. If a user or automated     system were tricked into connecting to a malicious server, a remote attacker could possibly use this issue     to cause a denial of service.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
405301	Alpine: multiple libsoup packages: security update to 2.66.2-r2	Tenable Cloud Security	Alpine Linux Local Security Checks	2023/10/31	2026/7/2	critical
405302	Alpine: libsoup: security update to 2.68.2-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	2023/10/31	2026/7/2	critical
405301	Alpine: multiple libsoup packages: security update to 2.66.2-r2	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	2023/10/31	2026/7/2	critical
405302	Alpine: libsoup: security update to 2.68.2-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	2023/10/31	2026/7/2	critical
129775	Ubuntu 18.04 LTS：libsoup 漏洞 (USN-4152-1)	Nessus	Ubuntu Local Security Checks	2019/10/10	2024/8/27	critical
129775	Ubuntu 18.04 LTS：libsoup 弱點 (USN-4152-1)	Nessus	Ubuntu Local Security Checks	2019/10/10	2024/8/27	critical
129775	Ubuntu 18.04 LTS : libsoup の脆弱性 (USN-4152-1)	Nessus	Ubuntu Local Security Checks	2019/10/10	2024/8/27	critical
132532	Photon OS 2.0: Libsoup PHSA-2019-2.0-0190	Nessus	PhotonOS Local Security Checks	2019/12/31	2024/7/22	critical
129775	Ubuntu 18.04 LTS : libsoup vulnerability (USN-4152-1)	Nessus	Ubuntu Local Security Checks	2019/10/10	2024/8/27	critical
132523	Photon OS 1.0: Libsoup PHSA-2019-1.0-0257	Nessus	PhotonOS Local Security Checks	2019/12/31	2020/1/2	critical

检测

插件搜索

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical