| Package | Affected versions | Patched versions |
|---|---|---|
| libsoup | ≥ 2.65.1, < 2.66.4≥ 2.67.1, ≤ 2.68.1 | 2.66.4 |
libsoup from versions 2.65.1 until 2.68.1 have a heap-based buffer over-read because soup_ntlm_parse_challenge() in soup-auth-ntlm.c does not properly check an NTLM message's length before proceeding with a memcpy.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free