krb5-server vulnerabilities (Red Hat)
100 vulnerabilities.
-
krb5-serverRed Hat MIT krb5 through 1.22.2 NULL Pointer Dereference via krb5_rd_cred() 7.1 High -
krb5-serverRed Hat MIT krb5 through 1.22.2 KDC NULL Pointer Dereference via S4U2Proxy PAC 6.9 Medium -
krb5-serverRed Hat Krb5: krb5: integer underflow in berval2tl_data() leads to heap out-of-bounds read 5.0 Medium -
krb5-serverRed Hat In MIT Kerberos 5 (aka krb5) before 1.22.3, there is an integer underflow and resultant out-of... 5.9 Medium -
krb5-serverRed Hat In MIT Kerberos 5 (aka krb5) before 1.22.3, there is a NULL pointer dereference if an application... 5.9 Medium -
krb5-serverRed Hat Krb5: kerberos rc4-hmac-md5 checksum vulnerability enabling message spoofing via md5 collisions 5.9 Medium -
krb5-serverRed Hat In MIT Kerberos 5 (aka krb5) before 1.22 (with incremental propagation), there is an integer... 7.1 High -
krb5-serverRed Hat RADIUS Protocol under RFC2865 is vulnerable to forgery attacks. 9.0 Critical -
krb5-serverRed Hat In MIT Kerberos 5 (aka krb5) before 1.21.3, an attacker can cause invalid memory reads during GSS... 9.1 Critical -
krb5-serverRed Hat In MIT Kerberos 5 (aka krb5) before 1.21.3, an attacker can modify the plaintext Extra Count... 7.5 High -
krb5-serverRed Hat Kerberos 5 (aka krb5) 1.21.2 contains a memory leak vulnerability in /krb5/src/kdc/ndr.c. 5.5 Medium -
krb5-serverRed Hat Kerberos 5 (aka krb5) 1.21.2 contains a memory leak vulnerability in /krb5/src/lib/gssapi/krb5... 7.5 High -
krb5-serverRed Hat Kerberos 5 (aka krb5) 1.21.2 contains a memory leak in /krb5/src/lib/rpc/pmap_rmt.c. 5.3 Medium -
krb5-serverRed Hat kdc/do_tgs_req.c in MIT Kerberos 5 (aka krb5) 1.21 before 1.21.2 has a double free that is... 8.8 High -
krb5-serverRed Hat lib/kadm5/kadm_rpc_xdr.c in MIT Kerberos 5 (aka krb5) before 1.20.2 and 1.21.x before 1.21.1... 6.5 Medium -
krb5-serverRed Hat Important: krb5 security update 8.8 High -
krb5-serverRed Hat The Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.18.5 and 1.19.x before 1... 6.5 Medium -
krb5-serverRed Hat ec_verify in kdc/kdc_preauth_ec.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka... 7.5 High -
krb5-serverRed Hat Kerberos KDC Security Feature Bypass Vulnerability 6.6 Medium -
krb5-serverRed Hat MIT Kerberos 5 (aka krb5) before 1.17.2 and 1.18.x before 1.18.3 allows unbounded recursion via... 7.5 High -
krb5-serverRed Hat A Reachable Assertion issue was discovered in the KDC in MIT Kerberos 5 (aka krb5) before 1.17.... 5.3 Medium -
krb5-serverRed Hat MIT krb5 1.6 or later allows an authenticated kadmin with permission to add principals to an LDAP... 3.8 Low -
krb5-serverRed Hat MIT krb5 1.6 or later allows an authenticated kadmin with permission to add principals to an LDAP... 4.7 Medium -
krb5-serverRed Hat An authentication bypass flaw was found in the way krb5's certauth interface before 1.16.1... 6.5 Medium -
krb5-serverRed Hat In MIT Kerberos 5 (aka krb5) 1.7 and later, an authenticated attacker can cause a KDC assertion... 6.5 Medium -
krb5-serverRed Hat The validate_as_request function in kdc_util.c in the Key Distribution Center (KDC) in MIT... 6.5 Medium -
krb5-serverRed Hat The process_db_args function in plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c in the LDAP KDB... 5.3 Medium -
krb5-serverRed Hat The (1) kadm5_create_principal_3 and (2) kadm5_modify_principal functions in lib/kadm5/srv... 7.5 High -
krb5-serverRed Hat Multiple memory leaks in kadmin/server/server_stubs.c in kadmind in MIT Kerberos 5 (aka krb5)... 6.5 Medium -
krb5-serverRed Hat The xdr_nullstring function in lib/kadm5/kadm_rpc_xdr.c in kadmind in MIT Kerberos 5 (aka krb5)... 5.3 Medium -
krb5-serverRed Hat The kdcpreauth modules in MIT Kerberos 5 (aka krb5) 1.12.x and 1.13.x before 1.13.2 do not... 5.8 Medium -
krb5-serverRed Hat MIT Kerberos 5 (aka krb5) through 1.13.1 incorrectly expects that a krb5_read_message data field... 5.0 Medium -
krb5-serverRed Hat The svcauth_gss_accept_sec_context function in lib/rpc/svc_auth_gss.c in MIT Kerberos 5 (aka krb5... 5.0 Medium -
krb5-serverRed Hat The check_rpcsec_auth function in kadmin/server/kadm_rpc_svc.c in kadmind in MIT Kerberos 5 (aka... 6.1 Medium -
krb5-serverRed Hat The auth_gssapi_unwrap_data function in lib/rpc/auth_gssapi_misc.c in MIT Kerberos 5 (aka krb5)... 9.0 High -
krb5-serverRed Hat The krb5_gss_process_context_token function in lib/gssapi/krb5/process_context_token.c in the... 9.0 High -
krb5-serverRed Hat The krb5_ldap_get_password_policy_from_dn function in plugins/kdb/ldap/libkdb_ldap... 3.5 Low -
krb5-serverRed Hat Off-by-one error in the krb5_encode_krbsecretkey function in plugins/kdb/ldap/libkdb_ldap... 8.5 High -
krb5-serverRed Hat The acc_ctx_cont function in the SPNEGO acceptor in lib/gssapi/spnego/spnego_mech.c in MIT... 7.8 High -
krb5-serverRed Hat Double free vulnerability in the init_ctx_reselect function in the SPNEGO initiator in lib/gssapi... 7.6 High -
krb5-serverRed Hat MIT Kerberos 5 (aka krb5) 1.7.x through 1.12.x before 1.12.2 allows remote attackers to cause a... 5.0 Medium -
krb5-serverRed Hat MIT Kerberos 5 (aka krb5) before 1.12.2 allows remote attackers to cause a denial of service ... 5.0 Medium -
krb5-serverRed Hat An unspecified third-party database module for the Key Distribution Center (KDC) in MIT Kerberos... 4.0 Medium -
krb5-serverRed Hat The setup_server_realm function in main.c in the Key Distribution Center (KDC) in MIT Kerberos 5 ... 4.3 Medium -
krb5-serverRed Hat schpw.c in the kpasswd service in kadmind in MIT Kerberos 5 (aka krb5) before 1.11.3 does not... 5.0 Medium -
krb5-serverRed Hat The prep_reprocess_req function in do_tgs_req.c in the Key Distribution Center (KDC) in MIT... 4.0 Medium -
krb5-serverRed Hat The pkinit_check_kdc_pkid function in plugins/preauth/pkinit/pkinit_crypto_openssl.c in the... 5.0 Medium -
krb5-serverRed Hat The pkinit_server_return_padata function in plugins/preauth/pkinit/pkinit_srv.c in the PKINIT... 5.0 Medium -
krb5-serverRed Hat The kdc_handle_protected_negotiation function in the Key Distribution Center (KDC) in MIT... 9.3 High -
krb5-serverRed Hat The check_1_6_dummy function in lib/kadm5/srv/svr_principal.c in kadmind in MIT Kerberos 5 (aka... 4.0 Medium - Show olderLoading…