PT-2026-34821 · Unknown · Go-Ntlmssp

Qmuntal · Publicado 2026-04-23 · Atualizado 2026-05-22 · CVE-2026-32952

Positive Technologies (AI Summary) · Pt

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions go-ntlmssp versões anteriores a 0.1.1

Description Uma mensagem de desafio NTLM maliciosa pode causar um pânico de slice fora dos limites, levando ao travamento de qualquer processo Go que utilize ntlmssp.Negotiator como transporte HTTP.

Recommendations Atualizar para a versão 0.1.1.

Correção

Integer Overflow

Enumeração de Fraquezas

CWE-190

Identificadores relacionados

CLEANSTART-2026-AX33738

CLEANSTART-2026-BB83999

CLEANSTART-2026-BD19566

CLEANSTART-2026-BN28456

CLEANSTART-2026-CB00984

CLEANSTART-2026-CC08450

CLEANSTART-2026-EP10142

CLEANSTART-2026-GG06672

CLEANSTART-2026-GX87608

CLEANSTART-2026-GZ35045

CLEANSTART-2026-HF07497

CLEANSTART-2026-HK01840

CLEANSTART-2026-JF61842

CLEANSTART-2026-LO63022

CLEANSTART-2026-MI47415

CLEANSTART-2026-MW66533

CLEANSTART-2026-NB83265

CLEANSTART-2026-NS33477

CLEANSTART-2026-OF37807

CLEANSTART-2026-OU18540

CLEANSTART-2026-OX06093

CLEANSTART-2026-PM88731

CLEANSTART-2026-PT56560

CLEANSTART-2026-RZ44006

CLEANSTART-2026-TK12973

CLEANSTART-2026-TX25294

CLEANSTART-2026-UO87758

CLEANSTART-2026-UY49411

CVE-2026-32952

GHSA-PJCQ-XVWQ-HHPJ

OPENSUSE-SU-2026:10672-1

OPENSUSE-SU-2026:10682-1

Produtos afetados

Go-Ntlmssp

Referências · 269

• https://github.com/Azure/go-ntlmssp/security/advisories/GHSA-pjcq-xvwq-hhpj · Aviso do Fabricante
• https://github.com/Azure/go-ntlmssp · Nota
• https://github.com/Azure/go-ntlmssp/releases/tag/v0.1.1 · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-BB83999.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-LO63022.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-GG06672.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-OF37807.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-PM88731.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-NB83265.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-GZ35045.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-EP10142.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-BD19566.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-NS33477.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-RZ44006.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-HK01840.json · Nota