CVE-2023-25565

medium

Published 2023-05-16 · Modified 2023-05-16

💬 Discuss on Community ✚ Propose mitigation

CVSS v3

—

CVSS v4 NEW

—

not yet in upstream

VIR risk

5.5

Description

RHSA-2023:3097: gssntlmssp security update (Moderate)

Predictions

Exploit likelihood

20%

Patch ETA

—

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

Mitigation details

Source: Red Hat Errata — Red Hat Inc. · View original ↗ · Open-Errata-API

Description gssntlmssp: incorrect free when decoding target information CVSS v3: 7.5 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Errata / fixed releases ProductPackageAdvisoryReleased Red Hat Enterprise Linux 8gssntlmssp-0:1.2.0-1.el8_8RHSA-2023:30972023-05-16T00:00:00Z

Description

gssntlmssp: incorrect free when decoding target information

CVSS v3: 7.5 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)

Errata / fixed releases

Product	Package	Advisory	Released
Red Hat Enterprise Linux 8	`gssntlmssp-0:1.2.0-1.el8_8`	RHSA-2023:3097	2023-05-16T00:00:00Z

Apply commands

bash fix

Apply RHSA-2023:3097 for Red Hat Enterprise Linux 8

yum update -y gssntlmssp
# or:
dnf upgrade -y gssntlmssp

OS impact

Debian Mixed 5 releases

Version	Status	Fixed in
trixie	Fixed	`1.2.0-1`
sid	Fixed	`1.2.0-1`
forky	Fixed	`1.2.0-1`
bullseye	Affected	—
bookworm	Fixed	`1.2.0-1`

AlmaLinux Fixed 1 release

Version	Status	Fixed in
8	Fixed	`gssntlmssp-1.2.0-1.el8_8.aarch64.rpm`

Red Hat Fixed 1 release

Version	Status	Fixed in
8	Fixed	—

References

Community-verified mitigations for this CVE will appear above when contributors publish them.

Verify integrity in audit chain (admin only). AS-IS.