krb5 vulnerabilities (Ubuntu)
54 vulnerabilities.
-
krb5Ubuntu MIT krb5 through 1.22.2 NULL Pointer Dereference via krb5_rd_cred() 7.1 High -
krb5Ubuntu MIT krb5 through 1.22.2 KDC NULL Pointer Dereference via S4U2Proxy PAC 6.9 Medium -
krb5Ubuntu Krb5: krb5: integer underflow in berval2tl_data() leads to heap out-of-bounds read 5.0 Medium -
krb5Ubuntu In MIT Kerberos 5 (aka krb5) before 1.22.3, there is an integer underflow and resultant out-of... 5.9 Medium -
krb5Ubuntu In MIT Kerberos 5 (aka krb5) before 1.22.3, there is a NULL pointer dereference if an application... 5.9 Medium -
krb5Ubuntu Krb5: kerberos rc4-hmac-md5 checksum vulnerability enabling message spoofing via md5 collisions 5.9 Medium -
krb5Ubuntu In MIT Kerberos 5 (aka krb5) before 1.22 (with incremental propagation), there is an integer... 7.1 High -
krb5Ubuntu RADIUS Protocol under RFC2865 is vulnerable to forgery attacks. 9.0 Critical -
krb5Ubuntu In MIT Kerberos 5 (aka krb5) before 1.21.3, an attacker can cause invalid memory reads during GSS... 9.1 Critical -
krb5Ubuntu In MIT Kerberos 5 (aka krb5) before 1.21.3, an attacker can modify the plaintext Extra Count... 7.5 High -
krb5Ubuntu Kerberos 5 (aka krb5) 1.21.2 contains a memory leak vulnerability in /krb5/src/kdc/ndr.c. 5.5 Medium -
krb5Ubuntu Kerberos 5 (aka krb5) 1.21.2 contains a memory leak vulnerability in /krb5/src/lib/gssapi/krb5... 7.5 High -
krb5Ubuntu Kerberos 5 (aka krb5) 1.21.2 contains a memory leak in /krb5/src/lib/rpc/pmap_rmt.c. 5.3 Medium -
krb5Ubuntu lib/kadm5/kadm_rpc_xdr.c in MIT Kerberos 5 (aka krb5) before 1.20.2 and 1.21.x before 1.21.1... 6.5 Medium -
krb5Ubuntu Important: krb5 security update 8.8 High -
krb5Ubuntu The Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.18.5 and 1.19.x before 1... 6.5 Medium -
krb5Ubuntu ec_verify in kdc/kdc_preauth_ec.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka... 7.5 High -
krb5Ubuntu MIT Kerberos 5 (aka krb5) before 1.17.2 and 1.18.x before 1.18.3 allows unbounded recursion via... 7.5 High -
krb5Ubuntu A Reachable Assertion issue was discovered in the KDC in MIT Kerberos 5 (aka krb5) before 1.17.... 5.3 Medium -
krb5Ubuntu MIT krb5 1.6 or later allows an authenticated kadmin with permission to add principals to an LDAP... 3.8 Low -
krb5Ubuntu MIT krb5 1.6 or later allows an authenticated kadmin with permission to add principals to an LDAP... 4.7 Medium -
krb5Ubuntu An issue was discovered in MIT Kerberos 5 (aka krb5) through 1.16. The pre-defined function ... 6.5 Medium -
krb5Ubuntu An issue was discovered in MIT Kerberos 5 (aka krb5) through 1.16. There is a variable "dbentry-... 7.5 High -
krb5Ubuntu plugins/preauth/pkinit/pkinit_crypto_openssl.c in MIT Kerberos 5 (aka krb5) through 1.15.2... 9.8 Critical -
krb5Ubuntu Double free vulnerability in MIT Kerberos 5 (aka krb5) allows attackers to have unspecified... 9.8 Critical -
krb5Ubuntu In MIT Kerberos 5 (aka krb5) 1.7 and later, an authenticated attacker can cause a KDC assertion... 6.5 Medium -
krb5Ubuntu The validate_as_request function in kdc_util.c in the Key Distribution Center (KDC) in MIT... 6.5 Medium -
krb5Ubuntu The process_db_args function in plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c in the LDAP KDB... 5.3 Medium -
krb5Ubuntu The (1) kadm5_create_principal_3 and (2) kadm5_modify_principal functions in lib/kadm5/srv... 7.5 High -
krb5Ubuntu Multiple memory leaks in kadmin/server/server_stubs.c in kadmind in MIT Kerberos 5 (aka krb5)... 6.5 Medium -
krb5Ubuntu The xdr_nullstring function in lib/kadm5/kadm_rpc_xdr.c in kadmind in MIT Kerberos 5 (aka krb5)... 5.3 Medium -
krb5Ubuntu The iakerb_gss_export_sec_context function in lib/gssapi/krb5/iakerb.c in MIT Kerberos 5 (aka... 8.5 High -
krb5Ubuntu The build_principal_va function in lib/krb5/krb/bld_princ.c in MIT Kerberos 5 (aka krb5) before 1... 4.0 Medium -
krb5Ubuntu lib/gssapi/krb5/iakerb.c in MIT Kerberos 5 (aka krb5) before 1.14 relies on an inappropriate... 7.1 High -
krb5Ubuntu lib/gssapi/spnego/spnego_mech.c in MIT Kerberos 5 (aka krb5) before 1.14 relies on an... 5.0 Medium -
krb5Ubuntu The kdcpreauth modules in MIT Kerberos 5 (aka krb5) 1.12.x and 1.13.x before 1.13.2 do not... 5.8 Medium -
krb5Ubuntu MIT Kerberos 5 (aka krb5) through 1.13.1 incorrectly expects that a krb5_read_message data field... 5.0 Medium -
krb5Ubuntu The svcauth_gss_accept_sec_context function in lib/rpc/svc_auth_gss.c in MIT Kerberos 5 (aka krb5... 5.0 Medium -
krb5Ubuntu The check_rpcsec_auth function in kadmin/server/kadm_rpc_svc.c in kadmind in MIT Kerberos 5 (aka... 6.1 Medium -
krb5Ubuntu The auth_gssapi_unwrap_data function in lib/rpc/auth_gssapi_misc.c in MIT Kerberos 5 (aka krb5)... 9.0 High -
krb5Ubuntu The krb5_gss_process_context_token function in lib/gssapi/krb5/process_context_token.c in the... 9.0 High -
krb5Ubuntu plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c in MIT Kerberos 5 (aka krb5) 1.12.x and 1.13.x... 3.5 Low -
krb5Ubuntu The krb5_ldap_get_password_policy_from_dn function in plugins/kdb/ldap/libkdb_ldap... 3.5 Low -
krb5Ubuntu The kadm5_randkey_principal_3 function in lib/kadm5/srv/svr_principal.c in kadmind in MIT... 2.1 Low -
krb5Ubuntu Off-by-one error in the krb5_encode_krbsecretkey function in plugins/kdb/ldap/libkdb_ldap... 8.5 High -
krb5Ubuntu The acc_ctx_cont function in the SPNEGO acceptor in lib/gssapi/spnego/spnego_mech.c in MIT... 7.8 High -
krb5Ubuntu Double free vulnerability in the init_ctx_reselect function in the SPNEGO initiator in lib/gssapi... 7.6 High -
krb5Ubuntu MIT Kerberos 5 (aka krb5) 1.7.x through 1.12.x before 1.12.2 allows remote attackers to cause a... 5.0 Medium -
krb5Ubuntu MIT Kerberos 5 (aka krb5) before 1.12.2 allows remote attackers to cause a denial of service ... 5.0 Medium -
krb5Ubuntu An unspecified third-party database module for the Key Distribution Center (KDC) in MIT Kerberos... 4.0 Medium - Show olderLoading…