krb5-debuginfo vulnerabilities (Red Hat)
116 vulnerabilities.
krb5-debuginfoRed HatThe krb5_ldap_lockout_audit function in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka...7.8 Highkrb5-debuginfoRed HatThe kdb_ldap plugin in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.9 through...7.8 Highkrb5-debuginfoRed Hatftpd.c in the GSS-API FTP daemon in MIT Kerberos Version 5 Applications (aka krb5-appl) 1.0.1 and...6.5 Mediumkrb5-debuginfoRed HatThe process_chpw_request function in schpw.c in the password-changing functionality in kadmind in...10.0 Highkrb5-debuginfoRed HatDouble free vulnerability in the prepare_error_as function in do_as_req.c in the Key Distribution...7.6 Highkrb5-debuginfoRed HatThe Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.6.x through 1.9, when an LDAP...5.0 Mediumkrb5-debuginfoRed HatThe unparse implementation in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.6...5.0 Mediumkrb5-debuginfoRed HatThe do_standalone function in the MIT krb5 KDC database propagation daemon (kpropd) in Kerberos 1...5.0 Mediumkrb5-debuginfoRed HatMIT Kerberos 5 (aka krb5) 1.8.x through 1.8.3 does not reject RC4 key-derivation checksums, which...6.3 Mediumkrb5-debuginfoRed HatMIT Kerberos 5 (aka krb5) 1.7.x and 1.8.x through 1.8.3 does not properly determine the...3.7 Lowkrb5-debuginfoRed HatMIT Kerberos 5 (aka krb5) 1.3.x, 1.4.x, 1.5.x, 1.6.x, 1.7.x, and 1.8.x through 1.8.3 does not...3.7 Lowkrb5-debuginfoRed HatThe merge_authdata function in kdc_authdata.c in the Key Distribution Center (KDC) in MIT...6.5 Mediumkrb5-debuginfoRed HatThe kg_accept_krb5 function in krb5/accept_sec_context.c in the GSS-API library in MIT Kerberos 5...6.8 Mediumkrb5-debuginfoRed HatUse-after-free vulnerability in kadmin/server/server_stubs.c in kadmind in MIT Kerberos 5 (aka...6.5 Mediumkrb5-debuginfoRed HatMultiple integer underflows in the (1) AES and (2) RC4 decryption functionality in the crypto...10.0 Highkrb5-debuginfoRed HatThe asn1_decode_generaltime function in lib/krb5/asn.1/asn1_decode.c in the ASN.1 GeneralizedTime...10.0 Highkrb5-debuginfoRed HatThe get_input_token function in the SPNEGO implementation in MIT Kerberos 5 (aka krb5) 1.5...5.8 Mediumkrb5-debuginfoRed HatThe spnego_gss_accept_sec_context function in lib/gssapi/spnego/spnego_mech.c in MIT Kerberos 5 ...5.0 Mediumkrb5-debuginfoRed HatBuffer overflow in the RPC library (lib/rpc/rpc_dtablesize.c) used by libgssrpc and kadmind in...9.3 Highkrb5-debuginfoRed HatBuffer overflow in the RPC library used by libgssrpc and kadmind in MIT Kerberos 5 (krb5) 1.4...10.0 Highkrb5-debuginfoRed HatThe Kerberos 4 support in KDC in MIT Kerberos 5 (krb5kdc) does not properly clear the unused...7.5 Highkrb5-debuginfoRed HatKDC in MIT Kerberos 5 (krb5kdc) does not set a global variable for some krb4 message types, which...9.8 Criticalkrb5-debuginfoRed HatDouble free vulnerability in the gss_krb5int_make_seal_token_v3 function in lib/gssapi/krb5...6.9 Mediumkrb5-debuginfoRed HatUse-after-free vulnerability in the gss_indicate_mechs function in lib/gssapi/mechglue...6.9 Mediumkrb5-debuginfoRed HatThe original patch for CVE-2007-3999 in svc_auth_gss.c in the RPCSEC_GSS RPC library in MIT...10.0 Highkrb5-debuginfoRed HatThe kadm5_modify_policy_internal function in lib/kadm5/srv/svr_policy.c in the Kerberos...8.5 Highkrb5-debuginfoRed HatStack-based buffer overflow in the svcauth_gss_validate function in lib/rpc/svc_auth_gss.c in the...10.0 Highkrb5-debuginfoRed HatStack-based buffer overflow in the rename_principal_2_svc function in kadmind for MIT Kerberos 1...9.0 Highkrb5-debuginfoRed HatInteger signedness error in the gssrpc__svcauth_unix function in svc_auth_unix.c in the RPC...8.3 Highkrb5-debuginfoRed HatThe gssrpc__svcauth_gssapi function in the RPC library in MIT Kerberos 5 (krb5) 1.6.1 and earlier...10.0 Highkrb5-debuginfoRed HatDouble free vulnerability in the GSS-API library (lib/gssapi/krb5/k5unseal.c), as used by the...9.0 Highkrb5-debuginfoRed HatStack-based buffer overflow in the krb5_klog_syslog function in the kadm5 library, as used by the...9.0 Highkrb5-debuginfoRed HatThe telnet daemon (telnetd) in MIT krb5 before 1.6.1 allows remote attackers to bypass...10.0 Highkrb5-debuginfoRed HatThe (1) krshd and (2) v4rcp applications in (a) MIT Kerberos 5 (krb5) up to 1.5, and 1.4.x before...7.2 Highkrb5-debuginfoRed HatDouble free vulnerability in the krb5_recvauth function in MIT Kerberos 5 (krb5) 1.4.1 and...9.8 Criticalkrb5-debuginfoRed HatHeap-based buffer overflow in the Key Distribution Center (KDC) in MIT Kerberos 5 (krb5) 1.4.1...7.5 Highkrb5-debuginfoRed HatMIT Kerberos 5 (krb5) 1.3 through 1.4.1 Key Distribution Center (KDC) allows remote attackers to...5.0 Mediumkrb5-debuginfoRed HatCertain BSD-based Telnet clients, including those used on Solaris and SuSE Linux, allow remote...5.0 Mediumkrb5-debuginfoRed HatBuffer overflow in the slc_add_reply function in various BSD-based Telnet clients, when handling...7.5 Highkrb5-debuginfoRed HatHeap-based buffer overflow in the env_opt_add function in telnet.c for various BSD-based Telnet...7.5 Highkrb5-debuginfoRed HatThe add_to_history function in svr_principal.c in libkadm5srv for MIT Kerberos 5 (krb5) up to 1.3...7.2 Highkrb5-debuginfoRed HatThe krb5-send-pr script in the kerberos5 (krb5) package in Trustix Secure Linux 1.5 through 2.1,...2.1 Lowkrb5-debuginfoRed HatThe asn1buf_skiptail function in the ASN.1 decoder library for MIT Kerberos 5 (krb5) 1.2.2...5.0 Mediumkrb5-debuginfoRed HatDouble free vulnerability in the krb5_rd_cred function for MIT Kerberos 5 (krb5) 1.3.1 and...4.6 Mediumkrb5-debuginfoRed HatDouble free vulnerabilities in the error handling code for ASN.1 decoders in the (1) Key...7.5 Highkrb5-debuginfoRed HatMultiple buffer overflows in krb5_aname_to_localname for MIT Kerberos 5 (krb5) 1.3.3 and earlier...10.0 Highkrb5-debuginfoRed HatDirectory traversal vulnerability in scp for OpenSSH before 3.4p1 allows remote malicious servers...4.3 Medium