Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 142

Export CSV
CVE-2019-14844

krb5: reversed strlcpy() allows client to crash the KDC

A flaw was found in, Fedora versions of krb5 from 1.16.1 to, including 1.17.x, in the way a Kerberos client could crash the KDC by sending one of the RFC 4556 "enctypes". A remote unauthenticated user could use this flaw to crash the KDC.

CVSS 3.1 · 7.5 High EPSS 4.4% KEV · Not listed
Vendors
Fedoraproject Mit
Products
Fedora Kerberos 5
CVE-2017-7562

krb5: Authentication bypass by improper validation of certificate EKU and SAN

An authentication bypass flaw was found in the way krb5's certauth interface before 1.16.1 handled the validation of client certificates. A remote attacker able to communicate with the KDC could potentially use this flaw to impersonate arbitrary principals under rare and erroneous circumstances.

CVSS 3.1 · 6.5 Medium EPSS 3.2% KEV · Not listed
Vendors
Mit Redhat
Products
Kerberos 5 Enterprise Linux Enterprise Linux Desktop and 2 more