krb5 vulnerabilities (Mageia)
43 vulnerabilities.
-
krb5Mageia In MIT Kerberos 5 (aka krb5) before 1.22.3, there is an integer underflow and resultant out-of... 5.9 Medium -
krb5Mageia In MIT Kerberos 5 (aka krb5) before 1.22.3, there is a NULL pointer dereference if an application... 5.9 Medium -
krb5Mageia Krb5: kerberos rc4-hmac-md5 checksum vulnerability enabling message spoofing via md5 collisions 5.9 Medium -
krb5Mageia In MIT Kerberos 5 (aka krb5) before 1.22 (with incremental propagation), there is an integer... 7.1 High -
krb5Mageia RADIUS Protocol under RFC2865 is vulnerable to forgery attacks. 9.0 Critical -
krb5Mageia In MIT Kerberos 5 (aka krb5) before 1.21.3, an attacker can cause invalid memory reads during GSS... 9.1 Critical -
krb5Mageia In MIT Kerberos 5 (aka krb5) before 1.21.3, an attacker can modify the plaintext Extra Count... 7.5 High -
krb5Mageia Kerberos 5 (aka krb5) 1.21.2 contains a memory leak vulnerability in /krb5/src/lib/gssapi/krb5... 7.5 High -
krb5Mageia Kerberos 5 (aka krb5) 1.21.2 contains a memory leak in /krb5/src/lib/rpc/pmap_rmt.c. 5.3 Medium -
krb5Mageia Important: krb5 security update 8.8 High -
krb5Mageia MIT Kerberos 5 (aka krb5) before 1.17.2 and 1.18.x before 1.18.3 allows unbounded recursion via... 7.5 High -
krb5Mageia A Reachable Assertion issue was discovered in the KDC in MIT Kerberos 5 (aka krb5) before 1.17.... 5.3 Medium -
krb5Mageia MIT krb5 1.6 or later allows an authenticated kadmin with permission to add principals to an LDAP... 3.8 Low -
krb5Mageia MIT krb5 1.6 or later allows an authenticated kadmin with permission to add principals to an LDAP... 4.7 Medium -
krb5Mageia An issue was discovered in MIT Kerberos 5 (aka krb5) through 1.16. The pre-defined function ... 6.5 Medium -
krb5Mageia An authentication bypass flaw was found in the way krb5's certauth interface before 1.16.1... 6.5 Medium -
krb5Mageia plugins/preauth/pkinit/pkinit_crypto_openssl.c in MIT Kerberos 5 (aka krb5) through 1.15.2... 9.8 Critical -
krb5Mageia Double free vulnerability in MIT Kerberos 5 (aka krb5) allows attackers to have unspecified... 9.8 Critical -
krb5Mageia In MIT Kerberos 5 (aka krb5) 1.7 and later, an authenticated attacker can cause a KDC assertion... 6.5 Medium -
krb5Mageia The validate_as_request function in kdc_util.c in the Key Distribution Center (KDC) in MIT... 6.5 Medium -
krb5Mageia The process_db_args function in plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c in the LDAP KDB... 5.3 Medium -
krb5Mageia The (1) kadm5_create_principal_3 and (2) kadm5_modify_principal functions in lib/kadm5/srv... 7.5 High -
krb5Mageia Multiple memory leaks in kadmin/server/server_stubs.c in kadmind in MIT Kerberos 5 (aka krb5)... 6.5 Medium -
krb5Mageia The xdr_nullstring function in lib/kadm5/kadm_rpc_xdr.c in kadmind in MIT Kerberos 5 (aka krb5)... 5.3 Medium -
krb5Mageia The iakerb_gss_export_sec_context function in lib/gssapi/krb5/iakerb.c in MIT Kerberos 5 (aka... 8.5 High -
krb5Mageia The build_principal_va function in lib/krb5/krb/bld_princ.c in MIT Kerberos 5 (aka krb5) before 1... 4.0 Medium -
krb5Mageia lib/gssapi/krb5/iakerb.c in MIT Kerberos 5 (aka krb5) before 1.14 relies on an inappropriate... 7.1 High -
krb5Mageia lib/gssapi/spnego/spnego_mech.c in MIT Kerberos 5 (aka krb5) before 1.14 relies on an... 5.0 Medium -
krb5Mageia MIT Kerberos 5 (aka krb5) through 1.13.1 incorrectly expects that a krb5_read_message data field... 5.0 Medium -
krb5Mageia The svcauth_gss_accept_sec_context function in lib/rpc/svc_auth_gss.c in MIT Kerberos 5 (aka krb5... 5.0 Medium -
krb5Mageia The check_rpcsec_auth function in kadmin/server/kadm_rpc_svc.c in kadmind in MIT Kerberos 5 (aka... 6.1 Medium -
krb5Mageia The auth_gssapi_unwrap_data function in lib/rpc/auth_gssapi_misc.c in MIT Kerberos 5 (aka krb5)... 9.0 High -
krb5Mageia The krb5_gss_process_context_token function in lib/gssapi/krb5/process_context_token.c in the... 9.0 High -
krb5Mageia The krb5_ldap_get_password_policy_from_dn function in plugins/kdb/ldap/libkdb_ldap... 3.5 Low -
krb5Mageia The kadm5_randkey_principal_3 function in lib/kadm5/srv/svr_principal.c in kadmind in MIT... 2.1 Low -
krb5Mageia Off-by-one error in the krb5_encode_krbsecretkey function in plugins/kdb/ldap/libkdb_ldap... 8.5 High -
krb5Mageia The acc_ctx_cont function in the SPNEGO acceptor in lib/gssapi/spnego/spnego_mech.c in MIT... 7.8 High -
krb5Mageia Double free vulnerability in the init_ctx_reselect function in the SPNEGO initiator in lib/gssapi... 7.6 High -
krb5Mageia MIT Kerberos 5 (aka krb5) 1.7.x through 1.12.x before 1.12.2 allows remote attackers to cause a... 5.0 Medium -
krb5Mageia MIT Kerberos 5 (aka krb5) before 1.12.2 allows remote attackers to cause a denial of service ... 5.0 Medium -
krb5Mageia do_tgs_req.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.11 before 1.11.4... 3.5 Low -
krb5Mageia The setup_server_realm function in main.c in the Key Distribution Center (KDC) in MIT Kerberos 5 ... 4.3 Medium -
krb5Mageia schpw.c in the kpasswd service in kadmind in MIT Kerberos 5 (aka krb5) before 1.11.3 does not... 5.0 Medium