Описание
Double free vulnerability in MIT Kerberos 5 (aka krb5) allows attackers to have unspecified impact via vectors involving automatic deletion of security contexts on error.
Ссылки
- Vendor Advisory
- Issue TrackingPatchThird Party AdvisoryVDB Entry
- PatchThird Party Advisory
- Vendor Advisory
- Issue TrackingPatchThird Party AdvisoryVDB Entry
- PatchThird Party Advisory
Уязвимые конфигурации
Конфигурация 1
Одно из
cpe:2.3:a:mit:kerberos_5:1.14:*:*:*:*:*:*:*
cpe:2.3:a:mit:kerberos_5:1.14:alpha1:*:*:*:*:*:*
cpe:2.3:a:mit:kerberos_5:1.14:beta1:*:*:*:*:*:*
cpe:2.3:a:mit:kerberos_5:1.14:beta2:*:*:*:*:*:*
cpe:2.3:a:mit:kerberos_5:1.14.1:*:*:*:*:*:*:*
cpe:2.3:a:mit:kerberos_5:1.14.2:*:*:*:*:*:*:*
cpe:2.3:a:mit:kerberos_5:1.14.3:*:*:*:*:*:*:*
cpe:2.3:a:mit:kerberos_5:1.14.4:*:*:*:*:*:*:*
cpe:2.3:a:mit:kerberos_5:1.14.5:*:*:*:*:*:*:*
cpe:2.3:a:mit:kerberos_5:1.15:*:*:*:*:*:*:*
cpe:2.3:a:mit:kerberos_5:1.15.1:*:*:*:*:*:*:*
cpe:2.3:a:mit:kerberos_5:1.15.1:beta1:*:*:*:*:*:*
cpe:2.3:a:mit:kerberos_5:1.15.1:beta2:*:*:*:*:*:*
Конфигурация 2
Одно из
cpe:2.3:o:fedoraproject:fedora:25:*:*:*:*:*:*:*
cpe:2.3:o:fedoraproject:fedora:26:*:*:*:*:*:*:*
EPSS
Процентиль: 82%
0.01706
Низкий
9.8 Critical
CVSS3
7.5 High
CVSS2
Дефекты
CWE-415
Связанные уязвимости
CVSS3: 9.8
ubuntu
больше 8 лет назад
Double free vulnerability in MIT Kerberos 5 (aka krb5) allows attackers to have unspecified impact via vectors involving automatic deletion of security contexts on error.
CVSS3: 3.7
redhat
больше 8 лет назад
Double free vulnerability in MIT Kerberos 5 (aka krb5) allows attackers to have unspecified impact via vectors involving automatic deletion of security contexts on error.
CVSS3: 9.8
debian
больше 8 лет назад
Double free vulnerability in MIT Kerberos 5 (aka krb5) allows attacker ...
EPSS
Процентиль: 82%
0.01706
Низкий
9.8 Critical
CVSS3
7.5 High
CVSS2
Дефекты
CWE-415