USN-5108-2: Libntlm vulnerability
15 February 2022
Libntlm could be made to crash or possibly execute arbitrary code.
Releases
Packages
- libntlm - NTLM authentication library
Details
USN-5108-1 fixed a vulnerability in Libntlm.
This update provides the corresponding update for Ubuntu 14.04 ESM and
Ubuntu 16.04 ESM.
Original advisory details:
It was discovered that Libntlm incorrectly handled specially crafted NTML
requests. An attacker could possibly use this issue to cause a denial of
service or another unspecified impact.
Update instructions
The problem can be corrected by updating your system to the following package versions:
Ubuntu 16.04
-
libntlm0
-
1.4-7ubuntu0.1~esm1
Available with Ubuntu Pro
Ubuntu 14.04
-
libntlm0
-
1.4-1ubuntu0.1~esm1
Available with Ubuntu Pro
In general, a standard system update will make all the necessary changes.
References
Related notices
- USN-5108-1: libntlm0, libntlm0-dev, libntlm