PT-2023-20163 · Unknown+6 · Gss-Ntlmssp+6

Philipturnbull · Publicado 2023-02-12 · Atualizado 2025-11-28 · CVE-2023-25565

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions GSS-NTLMSSP versions prior to 1.2.0

Description The issue is related to an incorrect free when decoding target information, which can trigger a denial of service. This occurs because the error condition incorrectly assumes the cb and sh buffers contain a copy of the data that needs to be freed. The vulnerability can be triggered via the main gss accept sec context entry point, likely causing an assertion failure in free.

Recommendations For versions prior to 1.2.0, update to version 1.2.0 to resolve the issue. As a temporary workaround, consider restricting the use of the gss accept sec context entry point until the update is applied.

Exploit

Correção

DoS

Enumeração de Fraquezas

CWE-763

CWE-590

Identificadores relacionados

ALSA-2023:3097

AZL-43606

AZL-45279

BDU:2025-12444

CESA-2023_3097

CVE-2023-25565

GHSA-7Q7F-WQCG-MVFG

MGASA-2023-0108

OESA-2023-1116

OPENSUSE-SU-2023:0048-1

OPENSUSE-SU-2024:12701-1

RHSA-2023:3097

RHSA-2023_3097

USN-7588-1

Produtos afetados

Almalinux

Centos

Debian

Gss-Ntlmssp

Linuxmint

Red Hat

Ubuntu

Referências · 54

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/25xxx/CVE-2023-25565.json · Exploit
• https://github.com/gssapi/gss-ntlmssp/releases/tag/v1.2.0 · Nota
• https://github.com/gssapi/gss-ntlmssp/commit/c16100f60907a2de92bcb676f303b81facee0f64 · Correção
• https://github.com/gssapi/gss-ntlmssp/security/advisories/GHSA-7q7f-wqcg-mvfg · Nota
• https://suse.com/security/cve/CVE-2023-25565 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2023-25567 · Nota de Segurança
• https://bugzilla.redhat.com/2172021 · Nota
• https://access.redhat.com/security/cve/CVE-2023-25565 · Nota
• https://advisories.mageia.org/MGASA-2023-0108.html · Nota de Segurança
• https://bugzilla.suse.com/1208281 · Nota
• https://lists.opensuse.org/archives/list/[e-mail]/thread/WXCOTOTL4ZIZB65QEGM65YZZILOED4A3 · Nota
• https://osv.dev/vulnerability/USN-7588-1 · Aviso do Fabricante
• https://linux.oracle.com/errata/ELSA-2023-3097.html · Aviso do Fabricante
• https://bugzilla.suse.com/1208280 · Nota
• https://osv.dev/vulnerability/ALSA-2023:3097 · Aviso do Fabricante