CVE-2019-17266

libsoup from versions 2.65.1 until 2.68.1 have a heap-based buffer over-read because soupntlmparse_challenge() in soup-auth-ntlm.c does not properly check an NTLM message's length before proceeding with a memcpy.

References

Affected packages

Git / github.com/gnome/libsoup

Affected ranges

Type

GIT

Repo

https://github.com/gnome/libsoup

Events

Introduced

f880a4a2de0f6e8ecfbe23078c71f1409f9a1b5d

Fixed

bdcf906745379df9d490bb214374512b84d5e8da

Introduced

24592981d6089b66968720f37825c8e45ae628a0

Last affected

15a3d17bdefebede9262933752a897cf51976a05

Database specific

{
    "versions": [
        {
            "introduced": "2.65.1"
        },
        {
            "fixed": "2.66.4"
        },
        {
            "introduced": "2.67.1"
        },
        {
            "last_affected": "2.68.1"
        }
    ]
}

Type: GIT
Repo: https://gitlab.gnome.org/GNOME/libsoup
Events: Introduced

0 Unknown introduced commit / All previous commits are affected

Fixed

88b7dff4467f4151afae244ea7d1223753cd05ab

Fixed

f8a54ac85eec2008c85393f331cdd251af8266ad

Affected versions

2.*

2.40.0

2.40.1

2.41.1

2.41.2

2.41.3

2.41.4

2.41.5

2.41.90

2.41.91

2.41.92

2.42.0

2.42.1

2.43.1

2.43.2

2.43.4

2.43.5

2.43.90

2.43.92

2.44.0

2.44.1

2.45.3

2.45.90

2.45.92

2.46.0

2.47.3

2.47.4

2.47.92

2.48.0

2.49.1

2.49.91

2.49.91.1

2.49.92

2.50.0

2.51.3

2.51.90

2.51.92

2.52.0

2.52.1

2.53.1

2.53.2

2.53.90

2.53.92

2.54.0

2.54.0.1

2.54.1

2.55.90

2.56.0

2.57.1

2.58.0

2.59.90

2.59.90.1

2.60.0

2.60.1

2.60.2

2.61.1

2.61.2

2.61.90

2.61.91

2.62.0

2.63.1

2.63.2

2.63.90

2.63.91

2.63.92

2.64.0

2.65.1

2.65.2

2.65.90

2.65.91

2.65.92

2.66.0

2.66.1

2.66.2

2.66.3

2.67.1

2.67.2

2.67.3

2.67.90

2.67.91

2.67.92

2.67.93

2.68.0

2.68.1

Other

LIBSOUP_1_99_15

LIBSOUP_1_99_16

LIBSOUP_1_99_17

LIBSOUP_1_99_19

LIBSOUP_1_99_20

LIBSOUP_1_99_22

LIBSOUP_1_99_23

LIBSOUP_1_99_24

LIBSOUP_1_99_25

LIBSOUP_2_1_10

LIBSOUP_2_1_11

LIBSOUP_2_1_12

LIBSOUP_2_1_13

LIBSOUP_2_1_2

LIBSOUP_2_1_3

LIBSOUP_2_1_4

LIBSOUP_2_1_5

LIBSOUP_2_1_6

LIBSOUP_2_1_7

LIBSOUP_2_1_8

LIBSOUP_2_1_9

LIBSOUP_2_23_1

LIBSOUP_2_23_6

LIBSOUP_2_23_91

LIBSOUP_2_23_92

LIBSOUP_2_24_0

LIBSOUP_2_25_1

LIBSOUP_2_25_2

LIBSOUP_2_25_4

LIBSOUP_2_25_5

LIBSOUP_2_25_91

LIBSOUP_2_26_0

LIBSOUP_2_26_0_9

LIBSOUP_2_26_1

LIBSOUP_2_27_1

LIBSOUP_2_27_2

LIBSOUP_2_27_4

LIBSOUP_2_27_5

LIBSOUP_2_27_90

LIBSOUP_2_27_91

LIBSOUP_2_27_92

LIBSOUP_2_28_0

LIBSOUP_2_28_1

LIBSOUP_2_29_3

LIBSOUP_2_29_5

LIBSOUP_2_29_6

LIBSOUP_2_29_90

LIBSOUP_2_29_91

LIBSOUP_2_2_0

LIBSOUP_2_2_100

LIBSOUP_2_2_101

LIBSOUP_2_2_102

LIBSOUP_2_2_103

LIBSOUP_2_2_5

LIBSOUP_2_2_6

LIBSOUP_2_2_6_1

LIBSOUP_2_2_90_NOT_A_REAL_RELEASE

LIBSOUP_2_2_91

LIBSOUP_2_2_92

LIBSOUP_2_2_93

LIBSOUP_2_2_94

LIBSOUP_2_2_95_1

LIBSOUP_2_2_96

LIBSOUP_2_2_97

LIBSOUP_2_2_98

LIBSOUP_2_2_99

LIBSOUP_2_30_0

LIBSOUP_2_31_6

LIBSOUP_2_31_90

LIBSOUP_2_31_92

LIBSOUP_2_32_0

LIBSOUP_2_32_1

LIBSOUP_2_32_2

LIBSOUP_2_33_4

LIBSOUP_2_33_5

LIBSOUP_2_33_6

LIBSOUP_2_33_90

LIBSOUP_2_33_92

LIBSOUP_2_34_0

LIBSOUP_2_34_1

LIBSOUP_2_35_3

LIBSOUP_2_35_4

LIBSOUP_2_35_90

LIBSOUP_2_35_92

LIBSOUP_2_36_0

LIBSOUP_2_37_1

LIBSOUP_2_37_2

LIBSOUP_2_37_3

LIBSOUP_2_37_4

LIBSOUP_2_37_5

LIBSOUP_2_37_90

LIBSOUP_2_37_91

LIBSOUP_2_37_92

LIBSOUP_2_38_0

LIBSOUP_2_38_1

LIBSOUP_2_39_1

LIBSOUP_2_39_2

LIBSOUP_2_39_3

LIBSOUP_2_39_4

LIBSOUP_2_39_4_1

LIBSOUP_2_39_5

LIBSOUP_2_39_90

LIBSOUP_2_39_91

LIBSOUP_2_39_92

LIBSOUP_2_3_0_1

LIBSOUP_2_3_2

LIBSOUP_2_3_4

LIBSOUP_2_40_0

LIBSOUP_2_40_1

LIBSOUP_2_41_1

LIBSOUP_2_41_2

LIBSOUP_2_41_3

LIBSOUP_2_41_4

LIBSOUP_2_41_5

LIBSOUP_2_41_90

LIBSOUP_2_41_91

LIBSOUP_2_41_92

LIBSOUP_2_42_0

LIBSOUP_2_42_1

LIBSOUP_2_43_1

LIBSOUP_2_43_2

LIBSOUP_2_43_4

LIBSOUP_2_43_5

LIBSOUP_2_43_90

LIBSOUP_2_43_92

LIBSOUP_2_4_0

LIBSOUP_2_4_1

SOUP_0_4

SOUP_0_4_1

SOUP_0_5

SOUP_0_6_0

SOUP_2_2_100

gnome-2-12-base

libsoup-2-0-branch-base

libsoup-hacking-branch-base

libsoup-pre214-branch-base

Database specific

unresolved_ranges

[
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "18.04"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "19.04"
            }
        ]
    }
]

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-17266.json"

vanir_signatures_modified

"2026-04-11T12:42:17Z"

vanir_signatures

[
    {
        "signature_version": "v1",
        "source": "https://gitlab.gnome.org/GNOME/libsoup@f8a54ac85eec2008c85393f331cdd251af8266ad",
        "target": {
            "function": "soup_ntlm_parse_challenge",
            "file": "libsoup/soup-auth-ntlm.c"
        },
        "deprecated": false,
        "id": "CVE-2019-17266-2e4ddb3a",
        "signature_type": "Function",
        "digest": {
            "length": 1524.0,
            "function_hash": "22872420392307703907202346827715479280"
        }
    },
    {
        "signature_version": "v1",
        "digest": {
            "line_hashes": [
                "14331469025586231543591114824372293487",
                "105098998331837764232321155729018717892",
                "266396959809182485889246480568975055349",
                "225325912854221928613598010904794245346"
            ],
            "threshold": 0.9
        },
        "signature_type": "Line",
        "deprecated": false,
        "id": "CVE-2019-17266-380fae61",
        "target": {
            "file": "libsoup/soup-auth-ntlm.c"
        },
        "source": "https://gitlab.gnome.org/GNOME/libsoup@88b7dff4467f4151afae244ea7d1223753cd05ab"
    },
    {
        "signature_version": "v1",
        "signature_type": "Function",
        "digest": {
            "length": 1524.0,
            "function_hash": "22872420392307703907202346827715479280"
        },
        "deprecated": false,
        "id": "CVE-2019-17266-5382f16b",
        "target": {
            "function": "soup_ntlm_parse_challenge",
            "file": "libsoup/soup-auth-ntlm.c"
        },
        "source": "https://gitlab.gnome.org/GNOME/libsoup@88b7dff4467f4151afae244ea7d1223753cd05ab"
    },
    {
        "signature_version": "v1",
        "signature_type": "Line",
        "source": "https://gitlab.gnome.org/GNOME/libsoup@f8a54ac85eec2008c85393f331cdd251af8266ad",
        "deprecated": false,
        "id": "CVE-2019-17266-6b025c1f",
        "target": {
            "file": "libsoup/soup-auth-ntlm.c"
        },
        "digest": {
            "line_hashes": [
                "14331469025586231543591114824372293487",
                "105098998331837764232321155729018717892",
                "266396959809182485889246480568975055349",
                "225325912854221928613598010904794245346"
            ],
            "threshold": 0.9
        }
    }
]