Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 142

Export CSV
CVE-2015-2698

krb5: IAKERB context export/import

The iakerb_gss_export_sec_context function in lib/gssapi/krb5/iakerb.c in MIT Kerberos 5 (aka krb5) 1.14 pre-release 2015-09-14 improperly accesses a certain pointer, which allows remote authenticated users to cause a denial of service (memory corruption) or possibly have unspecified other impact by interacting with an application that calls the gss_export_sec_context function. NOTE: this vulnerability exists because of an incorrect fix for CVE-2015-2696.

CVSS 2.0 · 8.5 High EPSS 2.9% KEV · Not listed
Vendors
Mit
Products
Kerberos 5
CVE-2015-8629

krb5: xdr_nullstring() doesn't check for terminating null character

The xdr_nullstring function in lib/kadm5/kadm_rpc_xdr.c in kadmind in MIT Kerberos 5 (aka krb5) before 1.13.4 and 1.14.x before 1.14.1 does not verify whether '\0' characters exist as expected, which allows remote authenticated users to obtain sensitive information or cause a denial of service (out-of-bounds read) via a crafted string.

CVSS 3.1 · 5.3 Medium EPSS 3.7% KEV · Not listed
Vendors
Debian Mit Opensuse and 2 more
Products
Debian Linux Kerberos 5 Leap and 10 more
CVE-2015-8630

krb5: krb5 doesn't check for null policy when KADM5_POLICY is set in the mask

The (1) kadm5_create_principal_3 and (2) kadm5_modify_principal functions in lib/kadm5/srv/svr_principal.c in kadmind in MIT Kerberos 5 (aka krb5) 1.12.x and 1.13.x before 1.13.4 and 1.14.x before 1.14.1 allow remote authenticated users to cause a denial of service (NULL pointer dereference and daemon crash) by specifying KADM5_POLICY with a NULL policy name.

CVSS 3.0 · 7.5 High EPSS 4.3% KEV · Not listed
Vendors
Mit Redhat
Products
Kerberos 5 Enterprise Linux
CVE-2015-8631

krb5: Memory leak caused by supplying a null principal name in request

Multiple memory leaks in kadmin/server/server_stubs.c in kadmind in MIT Kerberos 5 (aka krb5) before 1.13.4 and 1.14.x before 1.14.1 allow remote authenticated users to cause a denial of service (memory consumption) via a request specifying a NULL principal name.

CVSS 3.1 · 6.5 Medium EPSS 4.7% KEV · Not listed
Vendors
Debian Mit Opensuse and 2 more
Products
Debian Linux Kerberos 5 Leap and 9 more
CVE-2016-3119

krb5: null pointer dereference in kadmin

The process_db_args function in plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c in the LDAP KDB module in kadmind in MIT Kerberos 5 (aka krb5) through 1.13.4 and 1.14.x through 1.14.1 mishandles the DB argument, which allows remote authenticated users to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted request to modify a principal.

CVSS 3.0 · 5.3 Medium EPSS 39.8% KEV · Not listed
Vendors
Mit Opensuse Redhat
Products
Kerberos 5 Leap Opensuse and 1 more
CVE-2016-3120

krb5: S4U2Self KDC crash when anon is restricted

The validate_as_request function in kdc_util.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.13.6 and 1.4.x before 1.14.3, when restrict_anonymous_to_tgt is enabled, uses an incorrect client data structure, which allows remote authenticated users to cause a denial of service (NULL pointer dereference and daemon crash) via an S4U2Self request.

CVSS 3.0 · 6.5 Medium EPSS 4.6% KEV · Not listed
Vendors
Mit Redhat
Products
Kerberos 5 Enterprise Linux
CVE-2010-4020

krb5: krb5 may accept authdata checksums with low-entropy derived keys (MITKRB5-SA-2010-007)

MIT Kerberos 5 (aka krb5) 1.8.x through 1.8.3 does not reject RC4 key-derivation checksums, which might allow remote authenticated users to forge a (1) AD-SIGNEDPATH or (2) AD-KDC-ISSUED signature, and possibly gain privileges, by leveraging the small key space that results from certain one-byte stream-cipher operations.

CVSS 3.0 · 6.3 Medium EPSS 1.9% KEV · Not listed
Vendors
Mit Redhat
Products
Kerberos 5 Enterprise Linux
CVE-2011-1529

krb5: KDC denial of service vulnerabilities (MITKRB5-SA-2011-006)

The lookup_lockout_policy function in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.8 through 1.8.4 and 1.9 through 1.9.1, when the db2 (aka Berkeley DB) or LDAP back end is used, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via vectors that trigger certain process_as_req errors.

CVSS 2.0 · 7.8 High EPSS 4.0% KEV · Not listed
Vendors
Mit Redhat
Products
Kerberos 5 Enterprise Linux
CVE-2011-0283

krb5: uninitialized pointer use in krb5kdc leads to KDC crash

The Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.9 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a malformed request packet that does not trigger a response packet.

CVSS 2.0 · 5.0 Medium EPSS 2.6% KEV · Not listed
Vendors
Mit
Products
Kerberos 5
CVE-2011-0282

krb5: KDC crash when using LDAP backend caused by a special principal name (MITKRB5-SA-2011-002)

The Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.6.x through 1.9, when an LDAP backend is used, allows remote attackers to cause a denial of service (NULL pointer dereference or buffer over-read, and daemon crash) via a crafted principal name.

CVSS 2.0 · 5.0 Medium EPSS 3.5% KEV · Not listed
Vendors
Mit Redhat
Products
Kerberos Kerberos 5 Enterprise Linux
CVE-2011-0281

krb5: KDC hang when using LDAP backend caused by special principal name (MITKRB5-SA-2011-002)

The unparse implementation in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.6.x through 1.9, when an LDAP backend is used, allows remote attackers to cause a denial of service (file descriptor exhaustion and daemon hang) via a principal name that triggers use of a backslash escape sequence, as demonstrated by a \n sequence.

CVSS 2.0 · 5.0 Medium EPSS 4.2% KEV · Not listed
Vendors
Mit Redhat
Products
Kerberos Kerberos 5 Enterprise Linux
CVE-2010-4022

krb5: kpropd unexpected termination on invalid input (MITKRB5-SA-2011-001)

The do_standalone function in the MIT krb5 KDC database propagation daemon (kpropd) in Kerberos 1.7, 1.8, and 1.9, when running in standalone mode, does not properly handle when a worker child process "exits abnormally," which allows remote attackers to cause a denial of service (listening process termination, no new connections, and lack of updates in slave KVC) via unspecified vectors.

CVSS 2.0 · 5.0 Medium EPSS 3.7% KEV · Not listed
Vendors
Mit Redhat
Products
Kerberos 5 Enterprise Linux
CVE-2010-4021

krb5: KDC may issue unrequested tickets due to KrbFastReq forgery (MITKRB5-SA-2010-007)

The Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.7 does not properly restrict the use of TGT credentials for armoring TGS requests, which might allow remote authenticated users to impersonate a client by rewriting an inner request, aka a "KrbFastReq forgery issue."

CVSS 2.0 · 2.1 Low EPSS 2.1% KEV · Not listed
Vendors
Mit
Products
Kerberos 5
CVE-2010-1324

krb5: multiple checksum handling vulnerabilities (MITKRB5-SA-2010-007)

MIT Kerberos 5 (aka krb5) 1.7.x and 1.8.x through 1.8.3 does not properly determine the acceptability of checksums, which might allow remote attackers to forge GSS tokens, gain privileges, or have unspecified other impact via (1) an unkeyed checksum, (2) an unkeyed PAC checksum, or (3) a KrbFastArmoredReq checksum based on an RC4 key.

CVSS 3.0 · 3.7 Low EPSS 2.3% KEV · Not listed
Vendors
Mit Redhat
Products
Kerberos 5 Enterprise Linux
CVE-2010-1323

krb5: incorrect acceptance of certain checksums (MITKRB5-SA-2010-007)

MIT Kerberos 5 (aka krb5) 1.3.x, 1.4.x, 1.5.x, 1.6.x, 1.7.x, and 1.8.x through 1.8.3 does not properly determine the acceptability of checksums, which might allow remote attackers to modify user-visible prompt text, modify a response to a Key Distribution Center (KDC), or forge a KRB-SAFE message via certain checksums that (1) are unkeyed or (2) use RC4 keys.

CVSS 3.0 · 3.7 Low EPSS 2.8% KEV · Not listed
Vendors
Mit Redhat
Products
Kerberos Kerberos 5 Enterprise Linux
CVE-2010-1322

krb5: KDC uninitialized pointer crash in authorization data handling (MITKRB5-SA-2010-006)

The merge_authdata function in kdc_authdata.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.8.x before 1.8.4 does not properly manage an index into an authorization-data list, which allows remote attackers to cause a denial of service (daemon crash), or possibly obtain sensitive information, spoof authorization, or execute arbitrary code, via a TGS request that triggers an uninitialized pointer dereference, as demonstrated by a request from a Windows Active Directory client.

CVSS 2.0 · 6.5 Medium EPSS 3.0% KEV · Not listed
Vendors
Mit Redhat
Products
Kerberos 5 Enterprise Linux
CVE-2010-1321

krb5: null pointer dereference in GSS-API library leads to DoS (MITKRB5-SA-2010-005)

The kg_accept_krb5 function in krb5/accept_sec_context.c in the GSS-API library in MIT Kerberos 5 (aka krb5) through 1.7.1 and 1.8 before 1.8.2, as used in kadmind and other applications, does not properly check for invalid GSS-API tokens, which allows remote authenticated users to cause a denial of service (NULL pointer dereference and daemon crash) via an AP-REQ message in which the authenticator's checksum field is missing.

CVSS 2.0 · 6.8 Medium EPSS 6.9% KEV · Not listed
Vendors
Canonical Debian Fedoraproject and 5 more
Products
Ubuntu Linux Debian Linux Fedora and 7 more
CVE-2010-1320

krb5: double-free vulnerability in 1.7+

Double free vulnerability in do_tgs_req.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.7.x and 1.8.x before 1.8.2 allows remote authenticated users to cause a denial of service (daemon crash) or possibly execute arbitrary code via a request associated with (1) renewal or (2) validation.

CVSS 2.0 · 4.0 Medium EPSS 11.9% KEV · Not listed
Vendors
Mit
Products
Kerberos 5
CVE-2010-0629

krb5: kadmind use-after-free remote crash (MITKRB5-SA-2010-003)

Use-after-free vulnerability in kadmin/server/server_stubs.c in kadmind in MIT Kerberos 5 (aka krb5) 1.5 through 1.6.3 allows remote authenticated users to cause a denial of service (daemon crash) via a request from a kadmin client that sends an invalid API version number.

CVSS 3.1 · 6.5 Medium EPSS 5.5% KEV · Not listed
Vendors
Canonical Fedoraproject Mit and 3 more
Products
Ubuntu Linux Fedora Kerberos 5 and 3 more
CVE-2010-0628

krb5: Assertion failure in GSSAPI SPNEGO mechanism (MITKRB5-SA-2010-002)

The spnego_gss_accept_sec_context function in lib/gssapi/spnego/spnego_mech.c in the SPNEGO GSS-API functionality in MIT Kerberos 5 (aka krb5) 1.7 before 1.7.2 and 1.8 before 1.8.1 allows remote attackers to cause a denial of service (assertion failure and daemon crash) via an invalid packet that triggers incorrect preparation of an error token.

CVSS 2.0 · 5.0 Medium EPSS 3.3% KEV · Not listed
Vendors
Mit
Products
Kerberos 5