CVE ID:	CVE-2019-17455
Description:	Libntlm through 1.5 relies on a fixed buffer size for tSmbNtlmAuthRequest, tSmbNtlmAuthChallenge, and tSmbNtlmAuthResponse read and write operations, as demonstrated by a stack-based buffer over-read in buildSmbNtlmAuthRequest in smbutil.c for a crafted NTLM request.
Test IDs:	1.3.6.1.4.1.25623.1.0.892831   1.3.6.1.4.1.25623.1.0.853211   1.3.6.1.4.1.25623.1.0.878840   1.3.6.1.4.1.25623.1.0.892207   1.3.6.1.4.1.25623.1.1.12.2022.5108.2   1.3.6.1.4.1.25623.1.0.845097   1.3.6.1.4.1.25623.1.1.10.2020.0219   1.3.6.1.4.1.25623.1.0.878952
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2019-17455 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YZ5YWYNOJ5HMCKAHWLTY4MXZQWJJCBI7/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3BVFO3OVJPMSGIXBKNOCVOJZ3UTGZQF5/ https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=942145 https://gitlab.com/jas/libntlm/issues/2 https://lists.debian.org/debian-lts-announce/2020/05/msg00010.html https://lists.debian.org/debian-lts-announce/2021/11/msg00026.html SuSE Security Announcement: openSUSE-SU-2020:0806 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00032.html SuSE Security Announcement: openSUSE-SU-2020:0816 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00029.html