Описание
Multiple integer underflows in the (1) AES and (2) RC4 decryption functionality in the crypto library in MIT Kerberos 5 (aka krb5) 1.3 through 1.6.3, and 1.7 before 1.7.1, allow remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code by providing ciphertext with a length that is too short to be valid.
| Релиз | Статус | Примечание |
|---|---|---|
| dapper | released | 1.4.3-5ubuntu0.10 |
| devel | not-affected | 1.8+dfsg~alpha1-4 |
| hardy | released | 1.6.dfsg.3~beta1-2ubuntu1.3 |
| intrepid | released | 1.6.dfsg.4~beta1-3ubuntu0.3 |
| jaunty | released | 1.6.dfsg.4~beta1-5ubuntu2.2 |
| karmic | released | 1.7dfsg~beta3-1ubuntu0.3 |
| upstream | released | 1.7.1 |
Показывать по
EPSS
10 Critical
CVSS2
Связанные уязвимости
Multiple integer underflows in the (1) AES and (2) RC4 decryption functionality in the crypto library in MIT Kerberos 5 (aka krb5) 1.3 through 1.6.3, and 1.7 before 1.7.1, allow remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code by providing ciphertext with a length that is too short to be valid.
Multiple integer underflows in the (1) AES and (2) RC4 decryption functionality in the crypto library in MIT Kerberos 5 (aka krb5) 1.3 through 1.6.3, and 1.7 before 1.7.1, allow remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code by providing ciphertext with a length that is too short to be valid.
Multiple integer underflows in the (1) AES and (2) RC4 decryption func ...
Multiple integer underflows in the (1) AES and (2) RC4 decryption functionality in the crypto library in MIT Kerberos 5 (aka krb5) 1.3 through 1.6.3, and 1.7 before 1.7.1, allow remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code by providing ciphertext with a length that is too short to be valid.
EPSS
10 Critical
CVSS2