CVE-2021-37370
Fix CVE(s): CVE-2021-37370, CVE-2021-37371, CVE-2024-37370, CVE-2024-37371
No score
- SECURITY UPDATE: fix GSS vulnerabilities
- debian/patches/CVE-2021-37370.patch: prevent modification of Extra Count field in GSS krb5 wrap CFX wrap token to avoid appearing truncated to application header
- debian/patches/CVE-2021-37371.patch: fix invalid memory reads during GSS message token handling
- CVE-2024-37370
- CVE-2024-37371
What each source reports
OSVCLSA-2024-1727287657 No score
Fix CVE(s): CVE-2021-37370, CVE-2021-37371, CVE-2024-37370, CVE-2024-37371
- SECURITY UPDATE: fix GSS vulnerabilities
- debian/patches/CVE-2021-37370.patch: prevent modification of Extra Count field in GSS krb5 wrap CFX wrap token to avoid appearing truncated to application header
- debian/patches/CVE-2021-37371.patch: fix invalid memory reads during GSS message token handling
- CVE-2024-37370
- CVE-2024-37371
- Record
CLSA-2024-1727287657- Updated
- 2026-11-02
OSVCLSA-2024-1727288271 No score
Fix CVE(s): CVE-2021-37370, CVE-2021-37371, CVE-2024-37370, CVE-2024-37371
- SECURITY UPDATE: fix GSS vulnerabilities
- debian/patches/CVE-2021-37370.patch: prevent modification of Extra Count field in GSS krb5 wrap CFX wrap token to avoid appearing truncated to application header
- debian/patches/CVE-2021-37371.patch: fix invalid memory reads during GSS message token handling
- CVE-2024-37370
- CVE-2024-37371
- Record
CLSA-2024-1727288271- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
krb5-admin-serverTuxCare:Ubuntu:16.04 From an advisory covering 4 CVEs |
before 1.13.2+dfsg-5ubuntu2.2+tuxcare.els4 | 1.13.2+dfsg-5ubuntu2.2+tuxcare.els4 |
krb5-docTuxCare:Ubuntu:16.04 From an advisory covering 4 CVEs |
before 1.13.2+dfsg-5ubuntu2.2+tuxcare.els4 | 1.13.2+dfsg-5ubuntu2.2+tuxcare.els4 |
krb5-gss-samplesTuxCare:Ubuntu:16.04 From an advisory covering 4 CVEs |
before 1.13.2+dfsg-5ubuntu2.2+tuxcare.els4 | 1.13.2+dfsg-5ubuntu2.2+tuxcare.els4 |
krb5-k5tlsTuxCare:Ubuntu:16.04 From an advisory covering 4 CVEs |
before 1.13.2+dfsg-5ubuntu2.2+tuxcare.els4 | 1.13.2+dfsg-5ubuntu2.2+tuxcare.els4 |
krb5-kdcTuxCare:Ubuntu:16.04 From an advisory covering 4 CVEs |
before 1.13.2+dfsg-5ubuntu2.2+tuxcare.els4 | 1.13.2+dfsg-5ubuntu2.2+tuxcare.els4 |
krb5-kdc-ldapTuxCare:Ubuntu:16.04 From an advisory covering 4 CVEs |
before 1.13.2+dfsg-5ubuntu2.2+tuxcare.els4 | 1.13.2+dfsg-5ubuntu2.2+tuxcare.els4 |
krb5-localesTuxCare:Ubuntu:16.04 From an advisory covering 4 CVEs |
before 1.13.2+dfsg-5ubuntu2.2+tuxcare.els4 | 1.13.2+dfsg-5ubuntu2.2+tuxcare.els4 |
krb5-multidevTuxCare:Ubuntu:16.04 From an advisory covering 4 CVEs |
before 1.13.2+dfsg-5ubuntu2.2+tuxcare.els4 | 1.13.2+dfsg-5ubuntu2.2+tuxcare.els4 |
krb5-otpTuxCare:Ubuntu:16.04 From an advisory covering 4 CVEs |
before 1.13.2+dfsg-5ubuntu2.2+tuxcare.els4 | 1.13.2+dfsg-5ubuntu2.2+tuxcare.els4 |
krb5-pkinitTuxCare:Ubuntu:16.04 From an advisory covering 4 CVEs |
before 1.13.2+dfsg-5ubuntu2.2+tuxcare.els4 | 1.13.2+dfsg-5ubuntu2.2+tuxcare.els4 |
Show 35 moreShow less
| Package | Affected | Fixed |
|---|---|---|
krb5-userTuxCare:Ubuntu:16.04 From an advisory covering 4 CVEs |
before 1.13.2+dfsg-5ubuntu2.2+tuxcare.els4 | 1.13.2+dfsg-5ubuntu2.2+tuxcare.els4 |
libgssapi-krb5-2TuxCare:Ubuntu:16.04 From an advisory covering 4 CVEs |
before 1.13.2+dfsg-5ubuntu2.2+tuxcare.els4 | 1.13.2+dfsg-5ubuntu2.2+tuxcare.els4 |
libgssrpc4TuxCare:Ubuntu:16.04 From an advisory covering 4 CVEs |
before 1.13.2+dfsg-5ubuntu2.2+tuxcare.els4 | 1.13.2+dfsg-5ubuntu2.2+tuxcare.els4 |
libk5crypto3TuxCare:Ubuntu:16.04 From an advisory covering 4 CVEs |
before 1.13.2+dfsg-5ubuntu2.2+tuxcare.els4 | 1.13.2+dfsg-5ubuntu2.2+tuxcare.els4 |
libkadm5clnt-mit9TuxCare:Ubuntu:16.04 From an advisory covering 4 CVEs |
before 1.13.2+dfsg-5ubuntu2.2+tuxcare.els4 | 1.13.2+dfsg-5ubuntu2.2+tuxcare.els4 |
libkadm5srv-mit9TuxCare:Ubuntu:16.04 From an advisory covering 4 CVEs |
before 1.13.2+dfsg-5ubuntu2.2+tuxcare.els4 | 1.13.2+dfsg-5ubuntu2.2+tuxcare.els4 |
libkdb5-8TuxCare:Ubuntu:16.04 From an advisory covering 4 CVEs |
before 1.13.2+dfsg-5ubuntu2.2+tuxcare.els4 | 1.13.2+dfsg-5ubuntu2.2+tuxcare.els4 |
libkrad-devTuxCare:Ubuntu:16.04 From an advisory covering 4 CVEs |
before 1.13.2+dfsg-5ubuntu2.2+tuxcare.els4 | 1.13.2+dfsg-5ubuntu2.2+tuxcare.els4 |
libkrad0TuxCare:Ubuntu:16.04 From an advisory covering 4 CVEs |
before 1.13.2+dfsg-5ubuntu2.2+tuxcare.els4 | 1.13.2+dfsg-5ubuntu2.2+tuxcare.els4 |
libkrb5-3TuxCare:Ubuntu:16.04 From an advisory covering 4 CVEs |
before 1.13.2+dfsg-5ubuntu2.2+tuxcare.els4 | 1.13.2+dfsg-5ubuntu2.2+tuxcare.els4 |
libkrb5-devTuxCare:Ubuntu:16.04 From an advisory covering 4 CVEs |
before 1.13.2+dfsg-5ubuntu2.2+tuxcare.els4 | 1.13.2+dfsg-5ubuntu2.2+tuxcare.els4 |
libkrb5support0TuxCare:Ubuntu:16.04 From an advisory covering 4 CVEs |
before 1.13.2+dfsg-5ubuntu2.2+tuxcare.els4 | 1.13.2+dfsg-5ubuntu2.2+tuxcare.els4 |
krb5-admin-serverTuxCare:Ubuntu:18.04 From an advisory covering 4 CVEs |
before 1.16-2ubuntu0.4+tuxcare.els2 | 1.16-2ubuntu0.4+tuxcare.els2 |
krb5-docTuxCare:Ubuntu:18.04 From an advisory covering 4 CVEs |
before 1.16-2ubuntu0.4+tuxcare.els2 | 1.16-2ubuntu0.4+tuxcare.els2 |
krb5-gss-samplesTuxCare:Ubuntu:18.04 From an advisory covering 4 CVEs |
before 1.16-2ubuntu0.4+tuxcare.els2 | 1.16-2ubuntu0.4+tuxcare.els2 |
krb5-k5tlsTuxCare:Ubuntu:18.04 From an advisory covering 4 CVEs |
before 1.16-2ubuntu0.4+tuxcare.els2 | 1.16-2ubuntu0.4+tuxcare.els2 |
krb5-kdcTuxCare:Ubuntu:18.04 From an advisory covering 4 CVEs |
before 1.16-2ubuntu0.4+tuxcare.els2 | 1.16-2ubuntu0.4+tuxcare.els2 |
krb5-kdc-ldapTuxCare:Ubuntu:18.04 From an advisory covering 4 CVEs |
before 1.16-2ubuntu0.4+tuxcare.els2 | 1.16-2ubuntu0.4+tuxcare.els2 |
krb5-kpropdTuxCare:Ubuntu:18.04 From an advisory covering 4 CVEs |
before 1.16-2ubuntu0.4+tuxcare.els2 | 1.16-2ubuntu0.4+tuxcare.els2 |
krb5-localesTuxCare:Ubuntu:18.04 From an advisory covering 4 CVEs |
before 1.16-2ubuntu0.4+tuxcare.els2 | 1.16-2ubuntu0.4+tuxcare.els2 |
krb5-multidevTuxCare:Ubuntu:18.04 From an advisory covering 4 CVEs |
before 1.16-2ubuntu0.4+tuxcare.els2 | 1.16-2ubuntu0.4+tuxcare.els2 |
krb5-otpTuxCare:Ubuntu:18.04 From an advisory covering 4 CVEs |
before 1.16-2ubuntu0.4+tuxcare.els2 | 1.16-2ubuntu0.4+tuxcare.els2 |
krb5-pkinitTuxCare:Ubuntu:18.04 From an advisory covering 4 CVEs |
before 1.16-2ubuntu0.4+tuxcare.els2 | 1.16-2ubuntu0.4+tuxcare.els2 |
krb5-userTuxCare:Ubuntu:18.04 From an advisory covering 4 CVEs |
before 1.16-2ubuntu0.4+tuxcare.els2 | 1.16-2ubuntu0.4+tuxcare.els2 |
libgssapi-krb5-2TuxCare:Ubuntu:18.04 From an advisory covering 4 CVEs |
before 1.16-2ubuntu0.4+tuxcare.els2 | 1.16-2ubuntu0.4+tuxcare.els2 |
libgssrpc4TuxCare:Ubuntu:18.04 From an advisory covering 4 CVEs |
before 1.16-2ubuntu0.4+tuxcare.els2 | 1.16-2ubuntu0.4+tuxcare.els2 |
libk5crypto3TuxCare:Ubuntu:18.04 From an advisory covering 4 CVEs |
before 1.16-2ubuntu0.4+tuxcare.els2 | 1.16-2ubuntu0.4+tuxcare.els2 |
libkadm5clnt-mit11TuxCare:Ubuntu:18.04 From an advisory covering 4 CVEs |
before 1.16-2ubuntu0.4+tuxcare.els2 | 1.16-2ubuntu0.4+tuxcare.els2 |
libkadm5srv-mit11TuxCare:Ubuntu:18.04 From an advisory covering 4 CVEs |
before 1.16-2ubuntu0.4+tuxcare.els2 | 1.16-2ubuntu0.4+tuxcare.els2 |
libkdb5-9TuxCare:Ubuntu:18.04 From an advisory covering 4 CVEs |
before 1.16-2ubuntu0.4+tuxcare.els2 | 1.16-2ubuntu0.4+tuxcare.els2 |
libkrad-devTuxCare:Ubuntu:18.04 From an advisory covering 4 CVEs |
before 1.16-2ubuntu0.4+tuxcare.els2 | 1.16-2ubuntu0.4+tuxcare.els2 |
libkrad0TuxCare:Ubuntu:18.04 From an advisory covering 4 CVEs |
before 1.16-2ubuntu0.4+tuxcare.els2 | 1.16-2ubuntu0.4+tuxcare.els2 |
libkrb5-3TuxCare:Ubuntu:18.04 From an advisory covering 4 CVEs |
before 1.16-2ubuntu0.4+tuxcare.els2 | 1.16-2ubuntu0.4+tuxcare.els2 |
libkrb5-devTuxCare:Ubuntu:18.04 From an advisory covering 4 CVEs |
before 1.16-2ubuntu0.4+tuxcare.els2 | 1.16-2ubuntu0.4+tuxcare.els2 |
libkrb5support0TuxCare:Ubuntu:18.04 From an advisory covering 4 CVEs |
before 1.16-2ubuntu0.4+tuxcare.els2 | 1.16-2ubuntu0.4+tuxcare.els2 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2021-37370 is a vulnerability with no CVSS score yet in krb5-admin-server, published September 25, 2024. No source lists public exploit code. No source names a fixed version.