Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-wrjh-fhfj-xhfm

Опубликовано: 16 янв. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 7.1

Описание

In MIT Kerberos 5 (aka krb5) before 1.22 (with incremental propagation), there is an integer overflow for a large update size to resize() in kdb_log.c. An authenticated attacker can cause an out-of-bounds write and kadmind daemon crash.

In MIT Kerberos 5 (aka krb5) before 1.22 (with incremental propagation), there is an integer overflow for a large update size to resize() in kdb_log.c. An authenticated attacker can cause an out-of-bounds write and kadmind daemon crash.

EPSS

Процентиль: 2%
0.00014
Низкий

7.1 High

CVSS3

Дефекты

CWE-190

Связанные уязвимости

CVSS3: 7.1
ubuntu
23 дня назад

In MIT Kerberos 5 (aka krb5) before 1.22 (with incremental propagation), there is an integer overflow for a large update size to resize() in kdb_log.c. An authenticated attacker can cause an out-of-bounds write and kadmind daemon crash.

CVSS3: 6.5
redhat
около 2 лет назад

A flaw was found in krb5. With incremental propagation enabled, an authenticated attacker can cause kadmind to write beyond the end of the mapped region for the iprop log file. This issue can trigger a process crash and lead to a denial of service.

CVSS3: 7.1
nvd
23 дня назад

In MIT Kerberos 5 (aka krb5) before 1.22 (with incremental propagation), there is an integer overflow for a large update size to resize() in kdb_log.c. An authenticated attacker can cause an out-of-bounds write and kadmind daemon crash.

CVSS3: 7.1
debian
23 дня назад

In MIT Kerberos 5 (aka krb5) before 1.22 (with incremental propagation ...

suse-cvrf
12 месяцев назад

Security update for crypto-policies, krb5

EPSS

Процентиль: 2%
0.00014
Низкий

7.1 High

CVSS3

Дефекты

CWE-190