krb5 vulnerabilities (SUSE)
48 vulnerabilities.
-
krb5SUSE MIT krb5 through 1.22.2 NULL Pointer Dereference via krb5_rd_cred() 7.1 High -
krb5SUSE MIT krb5 through 1.22.2 KDC NULL Pointer Dereference via S4U2Proxy PAC 6.9 Medium -
krb5SUSE Krb5: krb5: integer underflow in berval2tl_data() leads to heap out-of-bounds read 5.0 Medium -
krb5SUSE In MIT Kerberos 5 (aka krb5) before 1.22.3, there is an integer underflow and resultant out-of... 5.9 Medium -
krb5SUSE In MIT Kerberos 5 (aka krb5) before 1.22.3, there is a NULL pointer dereference if an application... 5.9 Medium -
krb5SUSE Krb5: kerberos rc4-hmac-md5 checksum vulnerability enabling message spoofing via md5 collisions 5.9 Medium -
krb5SUSE In MIT Kerberos 5 (aka krb5) before 1.22 (with incremental propagation), there is an integer... 7.1 High -
krb5SUSE In MIT Kerberos 5 (aka krb5) before 1.21.3, an attacker can cause invalid memory reads during GSS... 9.1 Critical -
krb5SUSE In MIT Kerberos 5 (aka krb5) before 1.21.3, an attacker can modify the plaintext Extra Count... 7.5 High -
krb5SUSE Kerberos 5 (aka krb5) 1.21.2 contains a memory leak vulnerability in /krb5/src/kdc/ndr.c. 5.5 Medium -
krb5SUSE Kerberos 5 (aka krb5) 1.21.2 contains a memory leak vulnerability in /krb5/src/lib/gssapi/krb5... 7.5 High -
krb5SUSE Kerberos 5 (aka krb5) 1.21.2 contains a memory leak in /krb5/src/lib/rpc/pmap_rmt.c. 5.3 Medium -
krb5SUSE lib/kadm5/kadm_rpc_xdr.c in MIT Kerberos 5 (aka krb5) before 1.20.2 and 1.21.x before 1.21.1... 6.5 Medium -
krb5SUSE Important: krb5 security update 8.8 High -
krb5SUSE A flaw was found in the way Samba handled file/directory metadata. This flaw allows an... 6.8 Medium -
krb5SUSE The Samba AD DC includes checks when adding service principals names (SPNs) to an account to... 8.8 High -
krb5SUSE The Samba vfs_fruit module uses extended file attributes (EA, xattr) to provide "...enhanced... 8.8 High -
krb5SUSE All versions of Samba prior to 4.15.5 are vulnerable to a malicious client using a server symlink... 4.3 Medium -
krb5SUSE All versions of Samba prior to 4.13.16 are vulnerable to a malicious client using an SMB1 or NFS... 2.5 Low -
krb5SUSE The Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.18.5 and 1.19.x before 1... 6.5 Medium -
krb5SUSE ec_verify in kdc/kdc_preauth_ec.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka... 7.5 High -
krb5SUSE A flaw was found in Samba's libldb. Multiple, consecutive leading spaces in an LDAP attribute can... 7.5 High -
krb5SUSE A flaw was found in samba. Spaces used in a string around a domain name (DN), while supposed to... 7.5 High -
krb5SUSE MIT Kerberos 5 (aka krb5) before 1.17.2 and 1.18.x before 1.18.3 allows unbounded recursion via... 7.5 High -
krb5SUSE A Reachable Assertion issue was discovered in the KDC in MIT Kerberos 5 (aka krb5) before 1.17.... 5.3 Medium -
krb5SUSE MIT krb5 1.6 or later allows an authenticated kadmin with permission to add principals to an LDAP... 3.8 Low -
krb5SUSE MIT krb5 1.6 or later allows an authenticated kadmin with permission to add principals to an LDAP... 4.7 Medium -
krb5SUSE An authentication bypass flaw was found in the way krb5's certauth interface before 1.16.1... 6.5 Medium -
krb5SUSE plugins/preauth/pkinit/pkinit_crypto_openssl.c in MIT Kerberos 5 (aka krb5) through 1.15.2... 9.8 Critical -
krb5SUSE Double free vulnerability in MIT Kerberos 5 (aka krb5) allows attackers to have unspecified... 9.8 Critical -
krb5SUSE The validate_as_request function in kdc_util.c in the Key Distribution Center (KDC) in MIT... 6.5 Medium -
krb5SUSE The process_db_args function in plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c in the LDAP KDB... 5.3 Medium -
krb5SUSE The (1) kadm5_create_principal_3 and (2) kadm5_modify_principal functions in lib/kadm5/srv... 7.5 High -
krb5SUSE Multiple memory leaks in kadmin/server/server_stubs.c in kadmind in MIT Kerberos 5 (aka krb5)... 6.5 Medium -
krb5SUSE The xdr_nullstring function in lib/kadm5/kadm_rpc_xdr.c in kadmind in MIT Kerberos 5 (aka krb5)... 5.3 Medium -
krb5SUSE The iakerb_gss_export_sec_context function in lib/gssapi/krb5/iakerb.c in MIT Kerberos 5 (aka... 8.5 High -
krb5SUSE The build_principal_va function in lib/krb5/krb/bld_princ.c in MIT Kerberos 5 (aka krb5) before 1... 4.0 Medium -
krb5SUSE lib/gssapi/krb5/iakerb.c in MIT Kerberos 5 (aka krb5) before 1.14 relies on an inappropriate... 7.1 High -
krb5SUSE lib/gssapi/spnego/spnego_mech.c in MIT Kerberos 5 (aka krb5) before 1.14 relies on an... 5.0 Medium -
krb5SUSE The kdcpreauth modules in MIT Kerberos 5 (aka krb5) 1.12.x and 1.13.x before 1.13.2 do not... 5.8 Medium -
krb5SUSE MIT Kerberos 5 (aka krb5) through 1.13.1 incorrectly expects that a krb5_read_message data field... 5.0 Medium -
krb5SUSE The svcauth_gss_accept_sec_context function in lib/rpc/svc_auth_gss.c in MIT Kerberos 5 (aka krb5... 5.0 Medium -
krb5SUSE The check_rpcsec_auth function in kadmin/server/kadm_rpc_svc.c in kadmind in MIT Kerberos 5 (aka... 6.1 Medium -
krb5SUSE The auth_gssapi_unwrap_data function in lib/rpc/auth_gssapi_misc.c in MIT Kerberos 5 (aka krb5)... 9.0 High -
krb5SUSE The krb5_gss_process_context_token function in lib/gssapi/krb5/process_context_token.c in the... 9.0 High -
krb5SUSE plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c in MIT Kerberos 5 (aka krb5) 1.12.x and 1.13.x... 3.5 Low -
krb5SUSE The krb5_ldap_get_password_policy_from_dn function in plugins/kdb/ldap/libkdb_ldap... 3.5 Low -
krb5SUSE The kadm5_randkey_principal_3 function in lib/kadm5/srv/svr_principal.c in kadmind in MIT... 2.1 Low