krb5 vulnerabilities (Debian)
146 vulnerabilities.
krb5Debianschpw.c in the kpasswd service in kadmind in MIT Kerberos 5 (aka krb5) before 1.11.3 does not...5.0 Mediumkrb5DebianThe prep_reprocess_req function in do_tgs_req.c in the Key Distribution Center (KDC) in MIT...4.0 Mediumkrb5DebianThe pkinit_check_kdc_pkid function in plugins/preauth/pkinit/pkinit_crypto_openssl.c in the...5.0 Mediumkrb5DebianThe pkinit_server_return_padata function in plugins/preauth/pkinit/pkinit_srv.c in the PKINIT...5.0 Mediumkrb5DebianThe kdc_handle_protected_negotiation function in the Key Distribution Center (KDC) in MIT...9.3 Highkrb5DebianThe process_as_req function in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1...9.0 Highkrb5DebianThe check_1_6_dummy function in lib/kadm5/srv/svr_principal.c in kadmind in MIT Kerberos 5 (aka...4.0 Mediumkrb5Debianserver/server_stubs.c in the kadmin protocol implementation in MIT Kerberos 5 (aka krb5) 1.10...5.5 Mediumkrb5DebianBuffer overflow in libtelnet/encrypt.c in telnetd in FreeBSD 7.3 through 9.0, MIT Kerberos...10.0 Highkrb5DebianThe process_tgs_req function in do_tgs_req.c in the Key Distribution Center (KDC) in MIT Kerberos...6.8 Mediumkrb5DebianThe krb5_db2_lockout_audit function in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka...7.8 Highkrb5DebianThe lookup_lockout_policy function in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka...7.8 Highkrb5DebianThe krb5_ldap_lockout_audit function in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka...7.8 Highkrb5DebianThe kdb_ldap plugin in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.9 through...7.8 Highkrb5DebianThe process_chpw_request function in schpw.c in the password-changing functionality in kadmind in...10.0 Highkrb5DebianDouble free vulnerability in the prepare_error_as function in do_as_req.c in the Key Distribution...7.6 Highkrb5DebianThe Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.6.x through 1.9, when an LDAP...5.0 Mediumkrb5DebianThe unparse implementation in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.6...5.0 Mediumkrb5DebianThe do_standalone function in the MIT krb5 KDC database propagation daemon (kpropd) in Kerberos 1...5.0 Mediumkrb5DebianThe Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.7 does not properly restrict the...2.1 Lowkrb5DebianMIT Kerberos 5 (aka krb5) 1.8.x through 1.8.3 does not reject RC4 key-derivation checksums, which...6.3 Mediumkrb5DebianMIT Kerberos 5 (aka krb5) 1.7.x and 1.8.x through 1.8.3 does not properly determine the...3.7 Lowkrb5DebianMIT Kerberos 5 (aka krb5) 1.3.x, 1.4.x, 1.5.x, 1.6.x, 1.7.x, and 1.8.x through 1.8.3 does not...3.7 Lowkrb5DebianThe merge_authdata function in kdc_authdata.c in the Key Distribution Center (KDC) in MIT...6.5 Mediumkrb5DebianThe kg_accept_krb5 function in krb5/accept_sec_context.c in the GSS-API library in MIT Kerberos 5...6.8 Mediumkrb5DebianDouble free vulnerability in do_tgs_req.c in the Key Distribution Center (KDC) in MIT Kerberos 5 ...4.0 Mediumkrb5DebianUse-after-free vulnerability in kadmin/server/server_stubs.c in kadmind in MIT Kerberos 5 (aka...6.5 Mediumkrb5DebianThe spnego_gss_accept_sec_context function in lib/gssapi/spnego/spnego_mech.c in the SPNEGO GSS...5.0 Mediumkrb5DebianThe Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.7 before 1.7.2, and 1.8 alpha,...7.8 Highkrb5DebianMultiple integer underflows in the (1) AES and (2) RC4 decryption functionality in the crypto...10.0 Highkrb5DebianThe prep_reprocess_req function in kdc/do_tgs_req.c in the cross-realm referral implementation in...5.0 Mediumkrb5DebianThe asn1buf_imbed function in the ASN.1 decoder in MIT Kerberos 5 (aka krb5) 1.6.3, when PK-INIT...4.3 Mediumkrb5DebianThe asn1_decode_generaltime function in lib/krb5/asn.1/asn1_decode.c in the ASN.1 GeneralizedTime...10.0 Highkrb5DebianThe get_input_token function in the SPNEGO implementation in MIT Kerberos 5 (aka krb5) 1.5...5.8 Mediumkrb5DebianThe spnego_gss_accept_sec_context function in lib/gssapi/spnego/spnego_mech.c in MIT Kerberos 5 ...5.0 Mediumkrb5DebianBuffer overflow in the RPC library (lib/rpc/rpc_dtablesize.c) used by libgssrpc and kadmind in...9.3 Highkrb5DebianBuffer overflow in the RPC library used by libgssrpc and kadmind in MIT Kerberos 5 (krb5) 1.4...10.0 Highkrb5DebianThe Kerberos 4 support in KDC in MIT Kerberos 5 (krb5kdc) does not properly clear the unused...7.5 Highkrb5DebianKDC in MIT Kerberos 5 (krb5kdc) does not set a global variable for some krb4 message types, which...9.8 Criticalkrb5DebianDouble free vulnerability in the krb5_def_store_mkey function in lib/kdb/kdb_default.c in MIT...9.0 Highkrb5DebianDouble free vulnerability in the gss_krb5int_make_seal_token_v3 function in lib/gssapi/krb5...6.9 Mediumkrb5DebianInteger overflow in the svcauth_gss_get_principal function in lib/rpc/svc_auth_gss.c in MIT...10.0 Highkrb5DebianUse-after-free vulnerability in the gss_indicate_mechs function in lib/gssapi/mechglue...6.9 Mediumkrb5Debian** DISPUTED ** The reply function in ftpd.c in the gssftp ftpd in MIT Kerberos 5 (krb5) does not...9.3 Highkrb5DebianThe original patch for CVE-2007-3999 in svc_auth_gss.c in the RPCSEC_GSS RPC library in MIT...10.0 Highkrb5DebianThe kadm5_modify_policy_internal function in lib/kadm5/srv/svr_policy.c in the Kerberos...8.5 Highkrb5DebianStack-based buffer overflow in the svcauth_gss_validate function in lib/rpc/svc_auth_gss.c in the...10.0 Highkrb5DebianStack-based buffer overflow in the rename_principal_2_svc function in kadmind for MIT Kerberos 1...9.0 Highkrb5DebianInteger signedness error in the gssrpc__svcauth_unix function in svc_auth_unix.c in the RPC...8.3 Highkrb5DebianThe gssrpc__svcauth_gssapi function in the RPC library in MIT Kerberos 5 (krb5) 1.6.1 and earlier...10.0 High- Show moreLoading…