Описание
Kerberos 5 (aka krb5) 1.21.2 contains a memory leak in /krb5/src/lib/rpc/pmap_rmt.c.
A memory leak flaw was found in krb5 in /krb5/src/lib/rpc/pmap_rmt.c. This issue can lead to a denial of service through memory exhaustion.
Отчет
In pmap_rmt.c, a variable named port_ptr is defined and its address is passed to gssrpc_xdr_reference, where it is called pp. The program uses the macro mem_alloc (which refers to malloc) to allocate dynamic memory for pp. After allocation, if the xdr_u_int32(xdrs, &crp->resultslen) call within the if condition returns false, the overall if statement evaluates to false. The program then returns without using or freeing the memory allocated to port_ptr, resulting in a memory leak.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 10 | krb5 | Not affected | ||
| Red Hat Enterprise Linux 6 | krb5 | Out of support scope | ||
| Red Hat Enterprise Linux 7 | krb5 | Out of support scope | ||
| Red Hat Enterprise Linux 8 | krb5 | Fixed | RHSA-2024:3268 | 22.05.2024 |
| Red Hat Enterprise Linux 9 | krb5 | Fixed | RHSA-2024:9331 | 12.11.2024 |
| Red Hat Enterprise Linux 9 | krb5 | Fixed | RHSA-2024:9331 | 12.11.2024 |
Показывать по
Дополнительная информация
Статус:
EPSS
5.9 Medium
CVSS3
Связанные уязвимости
Kerberos 5 (aka krb5) 1.21.2 contains a memory leak in /krb5/src/lib/rpc/pmap_rmt.c.
Kerberos 5 (aka krb5) 1.21.2 contains a memory leak in /krb5/src/lib/rpc/pmap_rmt.c.
Kerberos 5 (aka krb5) 1.21.2 contains a memory leak in /krb5/src/lib/r ...
Kerberos 5 (aka krb5) 1.21.2 contains a memory leak in /krb5/src/lib/rpc/pmap_rmt.c.
EPSS
5.9 Medium
CVSS3