krb5 vulnerabilities (Debian)
129 vulnerabilities.
-
krb5Debian MIT krb5 through 1.22.2 NULL Pointer Dereference via krb5_rd_cred() 7.1 High -
krb5Debian MIT krb5 through 1.22.2 KDC NULL Pointer Dereference via S4U2Proxy PAC 6.9 Medium -
krb5Debian Krb5: krb5: integer underflow in berval2tl_data() leads to heap out-of-bounds read 5.0 Medium -
krb5Debian In MIT Kerberos 5 (aka krb5) before 1.22.3, there is an integer underflow and resultant out-of... 5.9 Medium -
krb5Debian In MIT Kerberos 5 (aka krb5) before 1.22.3, there is a NULL pointer dereference if an application... 5.9 Medium -
krb5Debian Krb5: kerberos rc4-hmac-md5 checksum vulnerability enabling message spoofing via md5 collisions 5.9 Medium -
krb5Debian In MIT Kerberos 5 (aka krb5) before 1.22 (with incremental propagation), there is an integer... 7.1 High -
krb5Debian In MIT Kerberos 5 (aka krb5) before 1.21.3, an attacker can cause invalid memory reads during GSS... 9.1 Critical -
krb5Debian In MIT Kerberos 5 (aka krb5) before 1.21.3, an attacker can modify the plaintext Extra Count... 7.5 High -
krb5Debian Kerberos 5 (aka krb5) 1.21.2 contains a memory leak vulnerability in /krb5/src/kdc/ndr.c. 5.5 Medium -
krb5Debian Kerberos 5 (aka krb5) 1.21.2 contains a memory leak vulnerability in /krb5/src/lib/gssapi/krb5... 7.5 High -
krb5Debian Kerberos 5 (aka krb5) 1.21.2 contains a memory leak in /krb5/src/lib/rpc/pmap_rmt.c. 5.3 Medium -
krb5Debian lib/kadm5/kadm_rpc_xdr.c in MIT Kerberos 5 (aka krb5) before 1.20.2 and 1.21.x before 1.21.1... 6.5 Medium -
krb5Debian Important: krb5 security update 8.8 High -
krb5Debian The Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.18.5 and 1.19.x before 1... 6.5 Medium -
krb5Debian ec_verify in kdc/kdc_preauth_ec.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka... 7.5 High -
krb5Debian MIT Kerberos 5 (aka krb5) before 1.17.2 and 1.18.x before 1.18.3 allows unbounded recursion via... 7.5 High -
krb5Debian A Reachable Assertion issue was discovered in the KDC in MIT Kerberos 5 (aka krb5) before 1.17.... 5.3 Medium -
krb5Debian MIT krb5 1.6 or later allows an authenticated kadmin with permission to add principals to an LDAP... 3.8 Low -
krb5Debian MIT krb5 1.6 or later allows an authenticated kadmin with permission to add principals to an LDAP... 4.7 Medium -
krb5Debian An issue was discovered in MIT Kerberos 5 (aka krb5) through 1.16. The pre-defined function ... 6.5 Medium -
krb5Debian An issue was discovered in MIT Kerberos 5 (aka krb5) through 1.16. There is a variable "dbentry-... 7.5 High -
krb5Debian plugins/preauth/pkinit/pkinit_crypto_openssl.c in MIT Kerberos 5 (aka krb5) through 1.15.2... 9.8 Critical -
krb5Debian Double free vulnerability in MIT Kerberos 5 (aka krb5) allows attackers to have unspecified... 9.8 Critical -
krb5Debian In MIT Kerberos 5 (aka krb5) 1.7 and later, an authenticated attacker can cause a KDC assertion... 6.5 Medium -
krb5Debian The validate_as_request function in kdc_util.c in the Key Distribution Center (KDC) in MIT... 6.5 Medium -
krb5Debian The process_db_args function in plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c in the LDAP KDB... 5.3 Medium -
krb5Debian The (1) kadm5_create_principal_3 and (2) kadm5_modify_principal functions in lib/kadm5/srv... 7.5 High -
krb5Debian Multiple memory leaks in kadmin/server/server_stubs.c in kadmind in MIT Kerberos 5 (aka krb5)... 6.5 Medium -
krb5Debian The xdr_nullstring function in lib/kadm5/kadm_rpc_xdr.c in kadmind in MIT Kerberos 5 (aka krb5)... 5.3 Medium -
krb5Debian The iakerb_gss_export_sec_context function in lib/gssapi/krb5/iakerb.c in MIT Kerberos 5 (aka... 8.5 High -
krb5Debian The build_principal_va function in lib/krb5/krb/bld_princ.c in MIT Kerberos 5 (aka krb5) before 1... 4.0 Medium -
krb5Debian lib/gssapi/krb5/iakerb.c in MIT Kerberos 5 (aka krb5) before 1.14 relies on an inappropriate... 7.1 High -
krb5Debian lib/gssapi/spnego/spnego_mech.c in MIT Kerberos 5 (aka krb5) before 1.14 relies on an... 5.0 Medium -
krb5Debian The kdcpreauth modules in MIT Kerberos 5 (aka krb5) 1.12.x and 1.13.x before 1.13.2 do not... 5.8 Medium -
krb5Debian MIT Kerberos 5 (aka krb5) through 1.13.1 incorrectly expects that a krb5_read_message data field... 5.0 Medium -
krb5Debian The svcauth_gss_accept_sec_context function in lib/rpc/svc_auth_gss.c in MIT Kerberos 5 (aka krb5... 5.0 Medium -
krb5Debian The check_rpcsec_auth function in kadmin/server/kadm_rpc_svc.c in kadmind in MIT Kerberos 5 (aka... 6.1 Medium -
krb5Debian The auth_gssapi_unwrap_data function in lib/rpc/auth_gssapi_misc.c in MIT Kerberos 5 (aka krb5)... 9.0 High -
krb5Debian The krb5_gss_process_context_token function in lib/gssapi/krb5/process_context_token.c in the... 9.0 High -
krb5Debian plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c in MIT Kerberos 5 (aka krb5) 1.12.x and 1.13.x... 3.5 Low -
krb5Debian The krb5_ldap_get_password_policy_from_dn function in plugins/kdb/ldap/libkdb_ldap... 3.5 Low -
krb5Debian The kadm5_randkey_principal_3 function in lib/kadm5/srv/svr_principal.c in kadmind in MIT... 2.1 Low -
krb5Debian Off-by-one error in the krb5_encode_krbsecretkey function in plugins/kdb/ldap/libkdb_ldap... 8.5 High -
krb5Debian The acc_ctx_cont function in the SPNEGO acceptor in lib/gssapi/spnego/spnego_mech.c in MIT... 7.8 High -
krb5Debian Double free vulnerability in the init_ctx_reselect function in the SPNEGO initiator in lib/gssapi... 7.6 High -
krb5Debian MIT Kerberos 5 (aka krb5) 1.7.x through 1.12.x before 1.12.2 allows remote attackers to cause a... 5.0 Medium -
krb5Debian MIT Kerberos 5 (aka krb5) before 1.12.2 allows remote attackers to cause a denial of service ... 5.0 Medium -
krb5Debian do_tgs_req.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.11 before 1.11.4... 3.5 Low -
krb5Debian The setup_server_realm function in main.c in the Key Distribution Center (KDC) in MIT Kerberos 5 ... 4.3 Medium - Show olderLoading…