CVE-2019-17455: canonical ubuntu_linux Out-of-bounds Read
Vulnerability summary
CVE-2019-17455 is a critical (CVSS 9.8) Out-of-bounds Read vulnerability in canonical ubuntu_linux. EPSS estimates a 3.11% chance of exploitation in the next 30 days, higher than 87.7% of scored vulnerabilities. 2 public exploits are recorded.
Public exploit (reference, Date unknown)
Source freshness unavailable
How is this decided?Timeline
- 10-10-2019PublishedVulnerability first disclosed.
- 05-08-2024Last modifiedVulnerability information updated.
Description
Libntlm through 1.5 relies on a fixed buffer size for tSmbNtlmAuthRequest, tSmbNtlmAuthChallenge, and tSmbNtlmAuthResponse read and write operations, as demonstrated by a stack-based buffer over-read in buildSmbNtlmAuthRequest in smbutil.c for a crafted NTLM request.
CVSS metrics
4 scores · 3 sources · 2 versions- OSV · UbuntuEcosystem advisory · calculated9.8CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- OSV · DebianEcosystem advisory · calculated9.8CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS trend
Probability
3.11%
Chance of exploitation in the next 30 days
Percentile
88%
Versus all other CVEs
30-day change
No change 0.00 pp
From 3.11% on 04-10-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
2 foundExploit Reference (gitlab.com)
Maturity: unknown
Exploit Reference (bugs.debian.org)
Maturity: unknown
Weaknesses
CWE · root causeAffected systems
Known conditions: network-reachable, no authentication, no user interaction (CVSS vector). Other conditions: not stated in public data.
Opensuse3 products
- backports_sle15.0:sp1
- leapEOL15.1
- libntlm&distro=openSUSE Leap 15.1< 1.6-lp151.3.3.1
Debian2 products
- libntlm< 1.6-1 | < 1.4-8+deb9u1 | < 1.4-3+deb8u1
- debian_linuxEOL8.0 | 9.0
Canonical1 product
- ubuntu_linuxEOL14.04 | 16.04 | 18.04 | 20.04
Fedoraproject1 product
- fedoraEOL32 | 33
Mageia1 product
- libntlm< 1.6-1.mga7
Nongnu1 product
- libntlm≤ 1.5
Suse1 product
- libntlm&distro=SUSE Package Hub 15 SP1< 1.6-bp151.4.3.1
Ubuntu1 product
- libntlm< 1.4-8ubuntu0.1 | < 1.5-2ubuntu0.1 | < 1.4-1ubuntu0.1~esm1 | < 1.4-7ubuntu0.1~esm1
8 vendors · 11 products
References
22 links- people.canonical.com/~ubuntu-security/cve/2019/CVE-2019-17455.htmlX Refsource CONFIRMThird Party Advisory
- bugs.debian.org/cgi-bin/bugreport.cgi?bug=942145X Refsource MISCExploitIssue TrackingMailing ListThird Party Advisory
- lists.debian.org/debian-lts-announce/2020/05/msg00010.htmlMailing ListX Refsource MLISTThird Party Advisory
- lists.opensuse.org/opensuse-security-announce/2020-06/msg00029.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
- lists.opensuse.org/opensuse-security-announce/2020-06/msg00032.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
- lists.debian.org/debian-lts-announce/2021/11/msg00026.htmlMailing ListX Refsource MLISTThird Party Advisory
Show all 22 references
- lists.opensuse.org/archives/…Advisory
- lists.opensuse.org/archives/…Advisory
