https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2023-25567.htmlhttps://patchthecve.com/cve/CVE-2023-25567.htmlWed, 17 Jun 2026 05:41:30 +0000HIGH 7.5: GSS-NTLMSSP, a mechglue plugin for the GSSAPI library that implements NTLM authentication, has an out-of-bounds read when decoding target information prior to version 1.2.0. The length of the `av_pair` is not checked properly for two of the elements which can trigger an out-of-bound read. The out-ofhttps://patchthecve.com/cve/CVE-2023-25566.htmlhttps://patchthecve.com/cve/CVE-2023-25566.htmlWed, 17 Jun 2026 05:41:30 +0000HIGH 7.5: GSS-NTLMSSP is a mechglue plugin for the GSSAPI library that implements NTLM authentication. Prior to version 1.2.0, a memory leak can be triggered when parsing usernames which can trigger a denial-of-service. The domain portion of a username may be overridden causing an allocated memory area the sihttps://patchthecve.com/cve/CVE-2023-25565.htmlhttps://patchthecve.com/cve/CVE-2023-25565.htmlWed, 17 Jun 2026 05:41:30 +0000HIGH 7.5: GSS-NTLMSSP is a mechglue plugin for the GSSAPI library that implements NTLM authentication. Prior to version 1.2.0, an incorrect free when decoding target information can trigger a denial of service. The error condition incorrectly assumes the `cb` and `sh` buffers contain a copy of the data that nhttps://patchthecve.com/cve/CVE-2023-25564.htmlhttps://patchthecve.com/cve/CVE-2023-25564.htmlWed, 17 Jun 2026 05:41:30 +0000MEDIUM 6.5: GSS-NTLMSSP is a mechglue plugin for the GSSAPI library that implements NTLM authentication. Prior to version 1.2.0, memory corruption can be triggered when decoding UTF16 strings. The variable `outlen` was not initialized and could cause writing a zero to an arbitrary place in memory if `ntlm_str_chttps://patchthecve.com/cve/CVE-2023-25563.htmlhttps://patchthecve.com/cve/CVE-2023-25563.htmlWed, 17 Jun 2026 05:41:29 +0000MEDIUM 5.9: GSS-NTLMSSP is a mechglue plugin for the GSSAPI library that implements NTLM authentication. Prior to version 1.2.0, multiple out-of-bounds reads when decoding NTLM fields can trigger a denial of service. A 32-bit integer overflow condition can lead to incorrect checks of consistency of length of in