Описание
Double free vulnerability in MIT Kerberos 5 (aka krb5) allows attackers to have unspecified impact via vectors involving automatic deletion of security contexts on error.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 5 | krb5 | Will not fix | ||
| Red Hat Enterprise Linux 6 | krb5 | Will not fix | ||
| Red Hat Enterprise Linux 7 | krb5 | Will not fix | ||
| Red Hat JBoss Enterprise Application Platform 6 | krb5 | Will not fix | ||
| Red Hat JBoss Enterprise Web Server 2 | krb5 | Will not fix | ||
| Red Hat JBoss Enterprise Web Server 3 | krb5 | Will not fix |
Показывать по
10
Дополнительная информация
Статус:
Low
Дефект:
CWE-416
https://bugzilla.redhat.com/show_bug.cgi?id=1488873krb5: Automatic sec context deletion could lead to double-free
EPSS
Процентиль: 92%
0.05481
Низкий
3.7 Low
CVSS3
Связанные уязвимости
CVSS3: 9.8
ubuntu
почти 9 лет назад
Double free vulnerability in MIT Kerberos 5 (aka krb5) allows attackers to have unspecified impact via vectors involving automatic deletion of security contexts on error.
CVSS3: 9.8
nvd
почти 9 лет назад
Double free vulnerability in MIT Kerberos 5 (aka krb5) allows attackers to have unspecified impact via vectors involving automatic deletion of security contexts on error.
CVSS3: 9.8
debian
почти 9 лет назад
Double free vulnerability in MIT Kerberos 5 (aka krb5) allows attacker ...
EPSS
Процентиль: 92%
0.05481
Низкий
3.7 Low
CVSS3