CVE-2019-14844

Опубликовано: 26 сент. 2019

Источник: nvd

CVSS3: 7.5

CVSS2: 5

EPSS Средний

Описание

A flaw was found in, Fedora versions of krb5 from 1.16.1 to, including 1.17.x, in the way a Kerberos client could crash the KDC by sending one of the RFC 4556 "enctypes". A remote unauthenticated user could use this flaw to crash the KDC.

Ссылки

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14844
Issue Tracking
Patch
Third Party Advisory
https://github.com/krb5/krb5/pull/981
Patch
Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/54ZYKEJZ77BXZWGF4NEVKC33ESVROEYC/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/N4LS5PIJOCNOUZGLO2OBT6GY334PUOSW/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TDE2QOKK4I4TV4WV74ZQWICZ4HJN2MOK/
https://security.netapp.com/advisory/ntap-20220325-0003/
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14844
Issue Tracking
Patch
Third Party Advisory
https://github.com/krb5/krb5/pull/981
Patch
Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/54ZYKEJZ77BXZWGF4NEVKC33ESVROEYC/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/N4LS5PIJOCNOUZGLO2OBT6GY334PUOSW/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TDE2QOKK4I4TV4WV74ZQWICZ4HJN2MOK/
https://security.netapp.com/advisory/ntap-20220325-0003/
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:mit:kerberos_5:*:*:*:*:*:*:*:*

Версия от 1.16.1 (включая) до 1.17.1 (включая)

Конфигурация 2

Одно из

cpe:2.3:o:fedoraproject:fedora:29:*:*:*:*:*:*:*

cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:*

cpe:2.3:o:fedoraproject:fedora:31:*:*:*:*:*:*:*

EPSS

Процентиль: 94%

0.11696

Средний

7.5 High

CVSS3

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-628

NVD-CWE-Other

Связанные уязвимости

CVE-2019-14844

CVSS3: 7.5

ubuntu

больше 6 лет назад

CVE-2019-14844

CVSS3: 7.5

redhat

больше 6 лет назад

CVE-2019-14844

CVSS3: 7.5

msrc

больше 4 лет назад

A flaw was found in Fedora versions of krb5 from 1.16.1 to including 1.17.x in the way a Kerberos client could crash the KDC by sending one of the RFC 4556 "enctypes". A remote unauthenticated user could use this flaw to crash the KDC.

CVE-2019-14844

CVSS3: 7.5

debian

больше 6 лет назад

A flaw was found in, Fedora versions of krb5 from 1.16.1 to, including ...

GHSA-5445-rx9p-gmmp

CVSS3: 7.5

github

больше 3 лет назад

EPSS

Процентиль: 94%

0.11696

Средний

7.5 High

CVSS3

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-628

NVD-CWE-Other