[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fOzCLFSZ-pV0d8i_e3Kxf9_DqKzw0oEOwHX3cDsaZefE":3,"g5a-risk:CVE-2019-17266":154},{"success":4,"data":5,"meta":152},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":39,"epssPercentile":27,"epssTimeSeries":40,"severity":41,"affectedProducts":42,"affectedProductsCount":56,"references":57,"referencesCount":90,"weaknesses":91,"weaknessesCount":100,"isActivelyExploited":101,"cisaInfo":27,"otxData":27,"relatedBlogPosts":102,"seoMetadata":103,"configurations":128,"relatedVendorCves":150,"notableEvents":151},"CVE-2019-17266","What is CVE-2019-17266?","libsoup from versions 2.65.1 until 2.68.1 have a heap-based buffer over-read because soup_ntlm_parse_challenge() in soup-auth-ntlm.c does not properly check an NTLM message's length before proceeding with a memcpy.","libsoup from versions 2.65.1 until 2.68.1 have a heap-based buffer over-read because soup_ntlm_parse_challenge() in soup-auth-ntlm.c does not properly check ...","2019-10-06T22:15:10.367","2023-11-07T03:06:11.977",9.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":27,"CVSSMetricV2":30,"CVSSMetricV40":27},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":25,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH","CRITICAL",null,3.9,5.9,[31],{"Source":17,"Type":18,"CVSSData":32,"BaseSeverity":25,"ExploitabilityScore":37,"ImpactScore":38,"ACInsufInfo":27,"ObtainAllPrivilege":27,"ObtainUserPrivilege":27,"ObtainOtherPrivilege":27,"UserInteractionRequired":27},{"Version":33,"VectorString":34,"AccessVector":21,"AccessComplexity":22,"Authentication":23,"ConfidentialityImpact":35,"IntegrityImpact":35,"AvailabilityImpact":35,"BaseScore":36,"BaseSeverity":27,"Exploitability":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"CollateralDamagePotential":27,"TargetDistribution":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"EnvironmentalScore":27},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:P\u002FI:P\u002FA:P","PARTIAL",7.5,10,6.4,0.02784,[39,39,39,39,39,39,39],"Critical",[43,48,53],{"vendor":44,"product":45,"version":46,"criteria":47,"vulnerable":4},"gnome","libsoup","*","cpe:2.3:a:gnome:libsoup:*:*:*:*:*:*:*:*",{"vendor":49,"product":50,"version":51,"criteria":52,"vulnerable":4},"canonical","ubuntu_linux","18.04","cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*",{"vendor":49,"product":50,"version":54,"criteria":55,"vulnerable":4},"19.04","cpe:2.3:o:canonical:ubuntu_linux:19.04:*:*:*:*:*:*:*",3,[58,63,67,71,74,79,82,86],{"url":59,"source":60,"tags":61},"https:\u002F\u002Fbugs.debian.org\u002Fcgi-bin\u002Fbugreport.cgi?bug=941912","Debian",[62],"Third Party Advisory",{"url":64,"source":65,"tags":66},"https:\u002F\u002Fgithub.com\u002FKirin-say\u002FVulnerabilities\u002Fblob\u002Fmaster\u002FCVE-2019-17266_POC.md","GitHub",[62],{"url":68,"source":69,"tags":70},"https:\u002F\u002Fgitlab.gnome.org\u002FGNOME\u002Flibsoup\u002Fcommit\u002F88b7dff4467f4151afae244ea7d1223753cd05ab","Gnome",[62],{"url":72,"source":69,"tags":73},"https:\u002F\u002Fgitlab.gnome.org\u002FGNOME\u002Flibsoup\u002Fcommit\u002Ff8a54ac85eec2008c85393f331cdd251af8266ad",[62],{"url":75,"source":69,"tags":76},"https:\u002F\u002Fgitlab.gnome.org\u002FGNOME\u002Flibsoup\u002Fissues\u002F173",[77,78,62],"Broken Link","Issue Tracking",{"url":80,"source":60,"tags":81},"https:\u002F\u002Fsecurity-tracker.debian.org\u002Ftracker\u002FCVE-2019-17266",[62],{"url":83,"source":84,"tags":85},"https:\u002F\u002Fusn.ubuntu.com\u002F4152-1\u002F","Ubuntu",[62],{"url":87,"source":88,"tags":89},"https:\u002F\u002Fwww.mail-archive.com\u002Fdebian-bugs-dist%40lists.debian.org\u002Fmsg1705054.html","Mail-archive",[],8,[92],{"id":93,"name":94,"description":95,"extendedDescription":96,"status":97,"abstraction":98,"structure":99},"CWE-125","Out-of-bounds Read","The product reads data past the end, or before the beginning, of the intended buffer.","","Draft","Base","Simple",1,false,[],{"title":104,"metaDescription":105,"keywords":106,"canonicalUrl":107,"structuredData":108},"What is CVE-2019-17266? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2019-17266, a critical severity cyber security vulnerability from 2019. libsoup from versions 2.65.1 until 2.68.1 have a heap-b...","CVE-2019-17266, CVE-2019-17266 vulnerability, CVE-2019-17266 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2019, CVSS score, exploit, patch, remediation, gnome security, canonical security, libsoup vulnerability, ubuntu_linux vulnerability","\u002Fwhat-is\u002Fcve-2019-17266",{"@context":109,"@type":110,"headline":104,"description":105,"datePublished":10,"dateModified":11,"author":111,"publisher":115,"about":119,"mainEntityOfPage":123,"articleSection":126,"keywords":127},"https:\u002F\u002Fschema.org","TechArticle",{"@type":112,"name":113,"url":114},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":112,"name":113,"url":114,"logo":116},{"@type":117,"url":118},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":120,"name":6,"description":121,"additionalType":122},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":124,"@id":125},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2019-17266","Cybersecurity","CVE-2019-17266, CVE-2019-17266 vulnerability, CVE-2019-17266 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[129,142],{"Operator":27,"Negate":27,"Nodes":130},[131],{"Operator":132,"Negate":27,"CPEMatch":133},"OR",[134,138],{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":135,"VersionStartExcluding":27,"VersionStartIncluding":136,"VersionEndExcluding":137,"VersionEndIncluding":27},"82D58806-8762-4FD9-9658-6C4809D1E432","2.65.1","2.66.4",{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":139,"VersionStartExcluding":27,"VersionStartIncluding":140,"VersionEndExcluding":27,"VersionEndIncluding":141},"73D27E8B-ABB1-436E-85B8-A692C8237393","2.67.1","2.68.1",{"Operator":27,"Negate":27,"Nodes":143},[144],{"Operator":132,"Negate":27,"CPEMatch":145},[146,148],{"Vulnerable":4,"Criteria":52,"MatchCriteriaID":147,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"23A7C53F-B80F-4E6A-AFA9-58EEA84BE11D",{"Vulnerable":4,"Criteria":55,"MatchCriteriaID":149,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"CD783B0C-9246-47D9-A937-6144FE8BFF0F",[],[],{"lastModified":11,"cacheTime":153,"version":33},1792370595744,{"score":155,"band":156,"action":157,"scoredAt":158},57,"Medium","Plan remediation","2026-10-16T06:46:59.414198+00:00"]