krb5 vulnerabilities (Red Hat)
117 vulnerabilities.
krb5Red HatBuffer overflow in libtelnet/encrypt.c in telnetd in FreeBSD 7.3 through 9.0, MIT Kerberos...10.0 Highkrb5Red HatThe process_tgs_req function in do_tgs_req.c in the Key Distribution Center (KDC) in MIT Kerberos...6.8 Mediumkrb5Red HatThe lookup_lockout_policy function in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka...7.8 Highkrb5Red HatThe krb5_ldap_lockout_audit function in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka...7.8 Highkrb5Red HatThe kdb_ldap plugin in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.9 through...7.8 Highkrb5Red Hatftpd.c in the GSS-API FTP daemon in MIT Kerberos Version 5 Applications (aka krb5-appl) 1.0.1 and...6.5 Mediumkrb5Red HatThe process_chpw_request function in schpw.c in the password-changing functionality in kadmind in...10.0 Highkrb5Red HatDouble free vulnerability in the prepare_error_as function in do_as_req.c in the Key Distribution...7.6 Highkrb5Red HatThe Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.6.x through 1.9, when an LDAP...5.0 Mediumkrb5Red HatThe unparse implementation in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.6...5.0 Mediumkrb5Red HatThe do_standalone function in the MIT krb5 KDC database propagation daemon (kpropd) in Kerberos 1...5.0 Mediumkrb5Red HatMIT Kerberos 5 (aka krb5) 1.8.x through 1.8.3 does not reject RC4 key-derivation checksums, which...6.3 Mediumkrb5Red HatMIT Kerberos 5 (aka krb5) 1.7.x and 1.8.x through 1.8.3 does not properly determine the...3.7 Lowkrb5Red HatMIT Kerberos 5 (aka krb5) 1.3.x, 1.4.x, 1.5.x, 1.6.x, 1.7.x, and 1.8.x through 1.8.3 does not...3.7 Lowkrb5Red HatThe merge_authdata function in kdc_authdata.c in the Key Distribution Center (KDC) in MIT...6.5 Mediumkrb5Red HatThe kg_accept_krb5 function in krb5/accept_sec_context.c in the GSS-API library in MIT Kerberos 5...6.8 Mediumkrb5Red HatUse-after-free vulnerability in kadmin/server/server_stubs.c in kadmind in MIT Kerberos 5 (aka...6.5 Mediumkrb5Red HatMultiple integer underflows in the (1) AES and (2) RC4 decryption functionality in the crypto...10.0 Highkrb5Red HatThe asn1_decode_generaltime function in lib/krb5/asn.1/asn1_decode.c in the ASN.1 GeneralizedTime...10.0 Highkrb5Red HatThe get_input_token function in the SPNEGO implementation in MIT Kerberos 5 (aka krb5) 1.5...5.8 Mediumkrb5Red HatThe spnego_gss_accept_sec_context function in lib/gssapi/spnego/spnego_mech.c in MIT Kerberos 5 ...5.0 Mediumkrb5Red HatBuffer overflow in the RPC library (lib/rpc/rpc_dtablesize.c) used by libgssrpc and kadmind in...9.3 Highkrb5Red HatBuffer overflow in the RPC library used by libgssrpc and kadmind in MIT Kerberos 5 (krb5) 1.4...10.0 Highkrb5Red HatThe Kerberos 4 support in KDC in MIT Kerberos 5 (krb5kdc) does not properly clear the unused...7.5 Highkrb5Red HatKDC in MIT Kerberos 5 (krb5kdc) does not set a global variable for some krb4 message types, which...9.8 Criticalkrb5Red HatDouble free vulnerability in the gss_krb5int_make_seal_token_v3 function in lib/gssapi/krb5...6.9 Mediumkrb5Red HatUse-after-free vulnerability in the gss_indicate_mechs function in lib/gssapi/mechglue...6.9 Mediumkrb5Red HatThe original patch for CVE-2007-3999 in svc_auth_gss.c in the RPCSEC_GSS RPC library in MIT...10.0 Highkrb5Red HatThe kadm5_modify_policy_internal function in lib/kadm5/srv/svr_policy.c in the Kerberos...8.5 Highkrb5Red HatStack-based buffer overflow in the svcauth_gss_validate function in lib/rpc/svc_auth_gss.c in the...10.0 Highkrb5Red HatStack-based buffer overflow in the rename_principal_2_svc function in kadmind for MIT Kerberos 1...9.0 Highkrb5Red HatInteger signedness error in the gssrpc__svcauth_unix function in svc_auth_unix.c in the RPC...8.3 Highkrb5Red HatThe gssrpc__svcauth_gssapi function in the RPC library in MIT Kerberos 5 (krb5) 1.6.1 and earlier...10.0 Highkrb5Red HatDouble free vulnerability in the GSS-API library (lib/gssapi/krb5/k5unseal.c), as used by the...9.0 Highkrb5Red HatStack-based buffer overflow in the krb5_klog_syslog function in the kadm5 library, as used by the...9.0 Highkrb5Red HatThe telnet daemon (telnetd) in MIT krb5 before 1.6.1 allows remote attackers to bypass...10.0 Highkrb5Red HatThe (1) krshd and (2) v4rcp applications in (a) MIT Kerberos 5 (krb5) up to 1.5, and 1.4.x before...7.2 Highkrb5Red HatDouble free vulnerability in the krb5_recvauth function in MIT Kerberos 5 (krb5) 1.4.1 and...9.8 Criticalkrb5Red HatHeap-based buffer overflow in the Key Distribution Center (KDC) in MIT Kerberos 5 (krb5) 1.4.1...7.5 Highkrb5Red HatMIT Kerberos 5 (krb5) 1.3 through 1.4.1 Key Distribution Center (KDC) allows remote attackers to...5.0 Mediumkrb5Red HatCertain BSD-based Telnet clients, including those used on Solaris and SuSE Linux, allow remote...5.0 Mediumkrb5Red HatBuffer overflow in the slc_add_reply function in various BSD-based Telnet clients, when handling...7.5 Highkrb5Red HatHeap-based buffer overflow in the env_opt_add function in telnet.c for various BSD-based Telnet...7.5 Highkrb5Red HatThe add_to_history function in svr_principal.c in libkadm5srv for MIT Kerberos 5 (krb5) up to 1.3...7.2 Highkrb5Red HatThe krb5-send-pr script in the kerberos5 (krb5) package in Trustix Secure Linux 1.5 through 2.1,...2.1 Lowkrb5Red HatThe asn1buf_skiptail function in the ASN.1 decoder library for MIT Kerberos 5 (krb5) 1.2.2...5.0 Mediumkrb5Red HatDouble free vulnerability in the krb5_rd_cred function for MIT Kerberos 5 (krb5) 1.3.1 and...4.6 Mediumkrb5Red HatDouble free vulnerabilities in the error handling code for ASN.1 decoders in the (1) Key...7.5 Highkrb5Red HatMultiple buffer overflows in krb5_aname_to_localname for MIT Kerberos 5 (krb5) 1.3.3 and earlier...10.0 Highkrb5Red HatDirectory traversal vulnerability in scp for OpenSSH before 3.4p1 allows remote malicious servers...4.3 Medium