Поиск уязвимостей
Количество 23
Количество 23
RLSA-2023:6699
Moderate: krb5 security and bug fix update
ELSA-2023-6699
ELSA-2023-6699: krb5 security and bug fix update (MODERATE)
CVE-2023-39975
kdc/do_tgs_req.c in MIT Kerberos 5 (aka krb5) 1.21 before 1.21.2 has a double free that is reachable if an authenticated user can trigger an authorization-data handling failure. Incorrect data is copied from one ticket to another.
CVE-2023-39975
kdc/do_tgs_req.c in MIT Kerberos 5 (aka krb5) 1.21 before 1.21.2 has a double free that is reachable if an authenticated user can trigger an authorization-data handling failure. Incorrect data is copied from one ticket to another.
CVE-2023-39975
kdc/do_tgs_req.c in MIT Kerberos 5 (aka krb5) 1.21 before 1.21.2 has a double free that is reachable if an authenticated user can trigger an authorization-data handling failure. Incorrect data is copied from one ticket to another.
CVE-2023-39975
kdc/do_tgs_req.c in MIT Kerberos 5 (aka krb5) 1.21 before 1.21.2 has a ...
CVE-2023-36054
lib/kadm5/kadm_rpc_xdr.c in MIT Kerberos 5 (aka krb5) before 1.20.2 and 1.21.x before 1.21.1 frees an uninitialized pointer. A remote authenticated user can trigger a kadmind crash. This occurs because _xdr_kadm5_principal_ent_rec does not validate the relationship between n_key_data and the key_data array count.
CVE-2023-36054
lib/kadm5/kadm_rpc_xdr.c in MIT Kerberos 5 (aka krb5) before 1.20.2 and 1.21.x before 1.21.1 frees an uninitialized pointer. A remote authenticated user can trigger a kadmind crash. This occurs because _xdr_kadm5_principal_ent_rec does not validate the relationship between n_key_data and the key_data array count.
CVE-2023-36054
lib/kadm5/kadm_rpc_xdr.c in MIT Kerberos 5 (aka krb5) before 1.20.2 and 1.21.x before 1.21.1 frees an uninitialized pointer. A remote authenticated user can trigger a kadmind crash. This occurs because _xdr_kadm5_principal_ent_rec does not validate the relationship between n_key_data and the key_data array count.
CVE-2023-36054
lib/kadm5/kadm_rpc_xdr.c in MIT Kerberos 5 (aka krb5) before 1.20.2 and 1.21.x before 1.21.1 frees an uninitialized pointer. A remote authenticated user can trigger a kadmind crash. This occurs because _xdr_kadm5_principal_ent_rec does not validate the relationship between n_key_data and the key_data array count.
CVE-2023-36054
lib/kadm5/kadm_rpc_xdr.c in MIT Kerberos 5 (aka krb5) before 1.20.2 an ...
GHSA-4grv-wgvh-8x82
kdc/do_tgs_req.c in MIT Kerberos 5 (aka krb5) 1.21 before 1.21.2 has a double free that is reachable if an authenticated user can trigger an authorization-data handling failure. Incorrect data is copied from one ticket to another.
ALT-PU-2023-4976
ALT-PU-2023-4976: package `krb5` update to version 1.21.2-alt1
SUSE-SU-2023:3434-1
Security update for krb5
SUSE-SU-2023:3398-1
Security update for krb5
SUSE-SU-2023:3365-1
Security update for krb5
SUSE-SU-2023:3363-1
Security update for krb5
SUSE-SU-2023:3325-1
Security update for krb5
GHSA-39q6-4vrm-fv3g
lib/kadm5/kadm_rpc_xdr.c in MIT Kerberos 5 (aka krb5) before 1.20.2 and 1.21.x before 1.21.1 frees an uninitialized pointer. A remote authenticated user can trigger a kadmind crash. This occurs because _xdr_kadm5_principal_ent_rec does not validate the relationship between n_key_data and the key_data array count.
BDU:2024-02770
Уязвимость файла lib/kadm5/kadm_rpc_xdr.c реализации сетевого протокола Kerberos, позволяющая нарушителю вызвать отказ в обслуживании
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | RLSA-2023:6699 Moderate: krb5 security and bug fix update | 6 месяцев назад | ||
| ELSA-2023-6699 ELSA-2023-6699: krb5 security and bug fix update (MODERATE) | около 3 лет назад | ||
 | CVE-2023-39975 kdc/do_tgs_req.c in MIT Kerberos 5 (aka krb5) 1.21 before 1.21.2 has a double free that is reachable if an authenticated user can trigger an authorization-data handling failure. Incorrect data is copied from one ticket to another. | CVSS3: 8.8 | 1% Низкий | около 3 лет назад |
 | CVE-2023-39975 kdc/do_tgs_req.c in MIT Kerberos 5 (aka krb5) 1.21 before 1.21.2 has a double free that is reachable if an authenticated user can trigger an authorization-data handling failure. Incorrect data is copied from one ticket to another. | CVSS3: 8.8 | 1% Низкий | около 3 лет назад |
 | CVE-2023-39975 kdc/do_tgs_req.c in MIT Kerberos 5 (aka krb5) 1.21 before 1.21.2 has a double free that is reachable if an authenticated user can trigger an authorization-data handling failure. Incorrect data is copied from one ticket to another. | CVSS3: 8.8 | 1% Низкий | около 3 лет назад |
| CVE-2023-39975 kdc/do_tgs_req.c in MIT Kerberos 5 (aka krb5) 1.21 before 1.21.2 has a ... | CVSS3: 8.8 | 1% Низкий | около 3 лет назад |
| CVE-2023-36054 lib/kadm5/kadm_rpc_xdr.c in MIT Kerberos 5 (aka krb5) before 1.20.2 and 1.21.x before 1.21.1 frees an uninitialized pointer. A remote authenticated user can trigger a kadmind crash. This occurs because _xdr_kadm5_principal_ent_rec does not validate the relationship between n_key_data and the key_data array count. | CVSS3: 6.5 | 3% Низкий | больше 3 лет назад |
| CVE-2023-36054 lib/kadm5/kadm_rpc_xdr.c in MIT Kerberos 5 (aka krb5) before 1.20.2 and 1.21.x before 1.21.1 frees an uninitialized pointer. A remote authenticated user can trigger a kadmind crash. This occurs because _xdr_kadm5_principal_ent_rec does not validate the relationship between n_key_data and the key_data array count. | CVSS3: 6.5 | 3% Низкий | больше 3 лет назад |
| CVE-2023-36054 lib/kadm5/kadm_rpc_xdr.c in MIT Kerberos 5 (aka krb5) before 1.20.2 and 1.21.x before 1.21.1 frees an uninitialized pointer. A remote authenticated user can trigger a kadmind crash. This occurs because _xdr_kadm5_principal_ent_rec does not validate the relationship between n_key_data and the key_data array count. | CVSS3: 6.5 | 3% Низкий | больше 3 лет назад |
 | CVE-2023-36054 lib/kadm5/kadm_rpc_xdr.c in MIT Kerberos 5 (aka krb5) before 1.20.2 and 1.21.x before 1.21.1 frees an uninitialized pointer. A remote authenticated user can trigger a kadmind crash. This occurs because _xdr_kadm5_principal_ent_rec does not validate the relationship between n_key_data and the key_data array count. | CVSS3: 6.5 | 3% Низкий | 21 день назад |
| CVE-2023-36054 lib/kadm5/kadm_rpc_xdr.c in MIT Kerberos 5 (aka krb5) before 1.20.2 an ... | CVSS3: 6.5 | 3% Низкий | больше 3 лет назад |
| GHSA-4grv-wgvh-8x82 kdc/do_tgs_req.c in MIT Kerberos 5 (aka krb5) 1.21 before 1.21.2 has a double free that is reachable if an authenticated user can trigger an authorization-data handling failure. Incorrect data is copied from one ticket to another. | CVSS3: 8.8 | 1% Низкий | около 3 лет назад |
| ALT-PU-2023-4976 ALT-PU-2023-4976: package `krb5` update to version 1.21.2-alt1 | CVSS3: 8.8 | 1% Низкий | около 3 лет назад |
 | SUSE-SU-2023:3434-1 Security update for krb5 | 3% Низкий | около 3 лет назад | |
| SUSE-SU-2023:3398-1 Security update for krb5 | 3% Низкий | около 3 лет назад | |
| SUSE-SU-2023:3365-1 Security update for krb5 | 3% Низкий | около 3 лет назад | |
| SUSE-SU-2023:3363-1 Security update for krb5 | 3% Низкий | около 3 лет назад | |
| SUSE-SU-2023:3325-1 Security update for krb5 | 3% Низкий | около 3 лет назад | |
| GHSA-39q6-4vrm-fv3g lib/kadm5/kadm_rpc_xdr.c in MIT Kerberos 5 (aka krb5) before 1.20.2 and 1.21.x before 1.21.1 frees an uninitialized pointer. A remote authenticated user can trigger a kadmind crash. This occurs because _xdr_kadm5_principal_ent_rec does not validate the relationship between n_key_data and the key_data array count. | CVSS3: 6.5 | 3% Низкий | больше 3 лет назад |
 | BDU:2024-02770 Уязвимость файла lib/kadm5/kadm_rpc_xdr.c реализации сетевого протокола Kerberos, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 6.5 | 3% Низкий | больше 3 лет назад |
Уязвимостей на страницу