CyberRota Analysis
AI-GeneratedA memory leak vulnerability exists in the NTLM target-info parser of gss-ntlmssp, triggered by crafted NTLM CHALLENGE messages containing duplicated AV_PAIR entries. This flaw allows a malicious actor to exploit the memory allocation process, potentially leading to gradual memory exhaustion on the client and resulting in a denial of service during NTLM authentication. Organizations utilizing NTLM authentication should prioritize addressing this vulnerability to mitigate potential service disruptions.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A flaw was found in gss-ntlmssp. A memory leak occurs in the NTLM target-info parser when a crafted NTLM CHALLENGE message contains duplicated string-valued AV_PAIR entries. The parser allocates memory for each string value but does not free the previous allocation when the same AV_PAIR type appears more than once, leaking the earlier allocation. A malicious or man-in-the-middle server can exploit this to cause gradual memory exhaustion on the client during NTLM authentication, leading to a denial of service.