Описание
[Prevent overflow when calculating ulog block size]
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| krb5 | fixed | 1.21.3-5 | package | |
| krb5 | fixed | 1.20.1-2+deb12u3 | bookworm | package |
Примечания
https://bugzilla.redhat.com/show_bug.cgi?id=2342796
Fixed by: https://github.com/krb5/krb5/commit/78ceba024b64d49612375be4a12d1c066b0bfbd0
EPSS
Процентиль: 2%
0.00014
Низкий
Связанные уязвимости
ubuntu
около 1 года назад
In MIT krb5 release 1.7 and later with incremental propagation enabled, an authenticated attacker can cause kadmind to write beyond the end of the mapped region for the iprop log file, likely causing a process crash.
CVSS3: 6.5
redhat
около 2 лет назад
A flaw was found in krb5. With incremental propagation enabled, an authenticated attacker can cause kadmind to write beyond the end of the mapped region for the iprop log file. This issue can trigger a process crash and lead to a denial of service.
EPSS
Процентиль: 2%
0.00014
Низкий