krb5 vulnerabilities (openSUSE)
99 vulnerabilities.
krb5openSUSEDouble free vulnerability in the init_ctx_reselect function in the SPNEGO initiator in lib/gssapi...7.6 Highkrb5openSUSEMIT Kerberos 5 (aka krb5) 1.7.x through 1.12.x before 1.12.2 allows remote attackers to cause a...5.0 Mediumkrb5openSUSEMIT Kerberos 5 (aka krb5) before 1.12.2 allows remote attackers to cause a denial of service ...5.0 Mediumkrb5openSUSEdo_tgs_req.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.11 before 1.11.4...3.5 Lowkrb5openSUSEThe setup_server_realm function in main.c in the Key Distribution Center (KDC) in MIT Kerberos 5 ...4.3 Mediumkrb5openSUSEschpw.c in the kpasswd service in kadmind in MIT Kerberos 5 (aka krb5) before 1.11.3 does not...5.0 Mediumkrb5openSUSEThe pkinit_check_kdc_pkid function in plugins/preauth/pkinit/pkinit_crypto_openssl.c in the...5.0 Mediumkrb5openSUSEThe pkinit_server_return_padata function in plugins/preauth/pkinit/pkinit_srv.c in the PKINIT...5.0 Mediumkrb5openSUSEThe check_1_6_dummy function in lib/kadm5/srv/svr_principal.c in kadmind in MIT Kerberos 5 (aka...4.0 Mediumkrb5openSUSEserver/server_stubs.c in the kadmin protocol implementation in MIT Kerberos 5 (aka krb5) 1.10...5.5 Mediumkrb5openSUSEThe process_tgs_req function in do_tgs_req.c in the Key Distribution Center (KDC) in MIT Kerberos...6.8 Mediumkrb5openSUSEThe lookup_lockout_policy function in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka...7.8 Highkrb5openSUSEThe krb5_ldap_lockout_audit function in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka...7.8 Highkrb5openSUSEThe kdb_ldap plugin in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.9 through...7.8 Highkrb5openSUSEThe process_chpw_request function in schpw.c in the password-changing functionality in kadmind in...10.0 Highkrb5openSUSEDouble free vulnerability in the prepare_error_as function in do_as_req.c in the Key Distribution...7.6 Highkrb5openSUSEThe Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.6.x through 1.9, when an LDAP...5.0 Mediumkrb5openSUSEThe unparse implementation in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.6...5.0 Mediumkrb5openSUSEThe do_standalone function in the MIT krb5 KDC database propagation daemon (kpropd) in Kerberos 1...5.0 Mediumkrb5openSUSEThe Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.7 does not properly restrict the...2.1 Lowkrb5openSUSEMIT Kerberos 5 (aka krb5) 1.8.x through 1.8.3 does not reject RC4 key-derivation checksums, which...6.3 Mediumkrb5openSUSEMIT Kerberos 5 (aka krb5) 1.7.x and 1.8.x through 1.8.3 does not properly determine the...3.7 Lowkrb5openSUSEMIT Kerberos 5 (aka krb5) 1.3.x, 1.4.x, 1.5.x, 1.6.x, 1.7.x, and 1.8.x through 1.8.3 does not...3.7 Lowkrb5openSUSEThe merge_authdata function in kdc_authdata.c in the Key Distribution Center (KDC) in MIT...6.5 Mediumkrb5openSUSEThe kg_accept_krb5 function in krb5/accept_sec_context.c in the GSS-API library in MIT Kerberos 5...6.8 Mediumkrb5openSUSEDouble free vulnerability in do_tgs_req.c in the Key Distribution Center (KDC) in MIT Kerberos 5 ...4.0 Mediumkrb5openSUSEThe spnego_gss_accept_sec_context function in lib/gssapi/spnego/spnego_mech.c in the SPNEGO GSS...5.0 Mediumkrb5openSUSEThe Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.7 before 1.7.2, and 1.8 alpha,...7.8 Highkrb5openSUSEMultiple integer underflows in the (1) AES and (2) RC4 decryption functionality in the crypto...10.0 Highkrb5openSUSEThe prep_reprocess_req function in kdc/do_tgs_req.c in the cross-realm referral implementation in...5.0 Mediumkrb5openSUSEThe asn1buf_imbed function in the ASN.1 decoder in MIT Kerberos 5 (aka krb5) 1.6.3, when PK-INIT...4.3 Mediumkrb5openSUSEThe asn1_decode_generaltime function in lib/krb5/asn.1/asn1_decode.c in the ASN.1 GeneralizedTime...10.0 Highkrb5openSUSEThe get_input_token function in the SPNEGO implementation in MIT Kerberos 5 (aka krb5) 1.5...5.8 Mediumkrb5openSUSEThe spnego_gss_accept_sec_context function in lib/gssapi/spnego/spnego_mech.c in MIT Kerberos 5 ...5.0 Mediumkrb5openSUSEBuffer overflow in the RPC library used by libgssrpc and kadmind in MIT Kerberos 5 (krb5) 1.4...10.0 Highkrb5openSUSEKDC in MIT Kerberos 5 (krb5kdc) does not set a global variable for some krb4 message types, which...9.8 Criticalkrb5openSUSEDouble free vulnerability in the krb5_def_store_mkey function in lib/kdb/kdb_default.c in MIT...9.0 Highkrb5openSUSEDouble free vulnerability in the gss_krb5int_make_seal_token_v3 function in lib/gssapi/krb5...6.9 Mediumkrb5openSUSEInteger overflow in the svcauth_gss_get_principal function in lib/rpc/svc_auth_gss.c in MIT...10.0 Highkrb5openSUSE** DISPUTED ** The reply function in ftpd.c in the gssftp ftpd in MIT Kerberos 5 (krb5) does not...9.3 Highkrb5openSUSEThe kadm5_modify_policy_internal function in lib/kadm5/srv/svr_policy.c in the Kerberos...8.5 Highkrb5openSUSEStack-based buffer overflow in the svcauth_gss_validate function in lib/rpc/svc_auth_gss.c in the...10.0 Highkrb5openSUSEStack-based buffer overflow in the rename_principal_2_svc function in kadmind for MIT Kerberos 1...9.0 Highkrb5openSUSEThe gssrpc__svcauth_gssapi function in the RPC library in MIT Kerberos 5 (krb5) 1.6.1 and earlier...10.0 Highkrb5openSUSEDouble free vulnerability in the GSS-API library (lib/gssapi/krb5/k5unseal.c), as used by the...9.0 Highkrb5openSUSEStack-based buffer overflow in the krb5_klog_syslog function in the kadm5 library, as used by the...9.0 Highkrb5openSUSEThe telnet daemon (telnetd) in MIT krb5 before 1.6.1 allows remote attackers to bypass...10.0 Highkrb5openSUSEThe "mechglue" abstraction interface of the GSS-API library for Kerberos 5 1.5 through 1.5.1, as...5.0 Mediumkrb5openSUSEThe RPC library in Kerberos 5 1.4 through 1.4.4, and 1.5 through 1.5.1, as used in Kerberos...9.3 High