Skip to contentMit Kerberos vulnerabilities
- mit kerberos 5, debian linux, opensuse +2 moreThe setup_server_realm function in main.c in the Key Distribution Center (KDC) in MIT Kerberos 5 ...CVE-2013-1418Fix available4.3 Medium
- mit kerberos 5, canonical ubuntu linux, debian linux +7 more +9 moreschpw.c in the kpasswd service in kadmind in MIT Kerberos 5 (aka krb5) before 1.11.3 does not...CVE-2002-2443Fix available5.0 Medium
- mit kerberos 5, fedoraproject fedora, opensuse +5 more +7 moreThe prep_reprocess_req function in do_tgs_req.c in the Key Distribution Center (KDC) in MIT...CVE-2013-1416Fix available4.0 Medium
- mit kerberos 5, opensuse +1 moreThe pkinit_check_kdc_pkid function in plugins/preauth/pkinit/pkinit_crypto_openssl.c in the...CVE-2013-1415Fix available5.0 Medium
- mit kerberos 5The pkinit_server_return_padata function in plugins/preauth/pkinit/pkinit_srv.c in the PKINIT...CVE-2012-1016Fix available5.0 Medium
- mit kerberos 5The kdc_handle_protected_negotiation function in the Key Distribution Center (KDC) in MIT...CVE-2012-1015Fix available9.3 High
- mit kerberos 5The process_as_req function in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1...CVE-2012-1014Fix available9.0 High
- mit kerberos 5The check_1_6_dummy function in lib/kadm5/srv/svr_principal.c in kadmind in MIT Kerberos 5 (aka...CVE-2012-1013Fix available4.0 Medium
- mit kerberos 5server/server_stubs.c in the kadmin protocol implementation in MIT Kerberos 5 (aka krb5) 1.10...CVE-2012-1012Fix available5.5 Medium
- mit kerberosThe process_tgs_req function in do_tgs_req.c in the Key Distribution Center (KDC) in MIT Kerberos...CVE-2011-1530Fix available6.8 Medium
- mit kerberos 5The krb5_db2_lockout_audit function in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka...CVE-2011-4151Fix available7.8 High
- mit kerberos 5The lookup_lockout_policy function in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka...CVE-2011-1529Fix available7.8 High
- mit kerberos 5The krb5_ldap_lockout_audit function in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka...CVE-2011-1528Fix available7.8 High
- mit kerberos 5The kdb_ldap plugin in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.9 through...CVE-2011-1527Fix available7.8 High
- mit kerberos 5The process_chpw_request function in schpw.c in the password-changing functionality in kadmind in...CVE-2011-0285Public exploitFix availableEPSS 20.8%10.0 High
- mit kerberos 5Double free vulnerability in the prepare_error_as function in do_as_req.c in the Key Distribution...CVE-2011-0284Fix available7.6 High
- mit kerberos 5The Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.9 allows remote attackers to...CVE-2011-02835.0 Medium
- mit kerberos, kerberos 5 +1 moreThe Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.6.x through 1.9, when an LDAP...CVE-2011-0282Fix available5.0 Medium
- mit kerberos, kerberos 5 +1 moreThe unparse implementation in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.6...CVE-2011-0281Fix available5.0 Medium
- mit kerberos 5The do_standalone function in the MIT krb5 KDC database propagation daemon (kpropd) in Kerberos 1...CVE-2010-4022Fix available5.0 Medium
- mit kerberos 5The Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.7 does not properly restrict the...CVE-2010-4021Fix available2.1 Low
- mit kerberos 5MIT Kerberos 5 (aka krb5) 1.8.x through 1.8.3 does not reject RC4 key-derivation checksums, which...CVE-2010-4020Fix available6.3 Medium
- mit kerberos 5MIT Kerberos 5 (aka krb5) 1.7.x and 1.8.x through 1.8.3 does not properly determine the...CVE-2010-1324Fix available3.7 Low
- mit kerberos, kerberos 5 +1 moreMIT Kerberos 5 (aka krb5) 1.3.x, 1.4.x, 1.5.x, 1.6.x, 1.7.x, and 1.8.x through 1.8.3 does not...CVE-2010-1323Fix available3.7 Low
- mit kerberos 5The merge_authdata function in kdc_authdata.c in the Key Distribution Center (KDC) in MIT...CVE-2010-1322Fix available6.5 Medium
- mit kerberos 5, canonical ubuntu linux, debian linux +4 more +6 moreThe kg_accept_krb5 function in krb5/accept_sec_context.c in the GSS-API library in MIT Kerberos 5...CVE-2010-1321Fix available6.8 Medium
- mit kerberos 5Double free vulnerability in do_tgs_req.c in the Key Distribution Center (KDC) in MIT Kerberos 5 ...CVE-2010-1320Public exploitFix availableEPSS 11.9%4.0 Medium
- mit kerberos 5, canonical ubuntu linux, fedoraproject fedora +2 more +4 moreUse-after-free vulnerability in kadmin/server/server_stubs.c in kadmind in MIT Kerberos 5 (aka...CVE-2010-0629Fix available6.5 Medium
- mit kerberos 5The spnego_gss_accept_sec_context function in lib/gssapi/spnego/spnego_mech.c in the SPNEGO GSS...CVE-2010-0628Fix available5.0 Medium
- mit kerberos, kerberos 5 +1 moreThe Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.7 before 1.7.2, and 1.8 alpha,...CVE-2010-0283Fix available7.8 High
- mit kerberos, kerberos 5 +1 moreMultiple integer underflows in the (1) AES and (2) RC4 decryption functionality in the crypto...CVE-2009-4212Fix available10.0 High
- mit kerberos 5The prep_reprocess_req function in kdc/do_tgs_req.c in the cross-realm referral implementation in...CVE-2009-3295Fix availableEPSS 40.3%5.0 Medium
- mit kerberosThe asn1buf_imbed function in the ASN.1 decoder in MIT Kerberos 5 (aka krb5) 1.6.3, when PK-INIT...CVE-2009-0847Fix available4.3 Medium
- mit kerberos 5, apple mac os x, canonical ubuntu linux +6 more +8 moreThe asn1_decode_generaltime function in lib/krb5/asn.1/asn1_decode.c in the ASN.1 GeneralizedTime...CVE-2009-0846Fix available10.0 High
- mit kerberos, kerberos 5 +1 moreThe get_input_token function in the SPNEGO implementation in MIT Kerberos 5 (aka krb5) 1.5...CVE-2009-0844Fix available5.8 Medium
- mit kerberos, kerberos 5 +1 moreThe spnego_gss_accept_sec_context function in lib/gssapi/spnego/spnego_mech.c in MIT Kerberos 5 ...CVE-2009-0845Fix available5.0 Medium
- mit kerberos 5Buffer overflow in the RPC library (lib/rpc/rpc_dtablesize.c) used by libgssrpc and kadmind in...CVE-2008-0948Fix available9.3 High
- mit kerberos 5Buffer overflow in the RPC library used by libgssrpc and kadmind in MIT Kerberos 5 (krb5) 1.4...CVE-2008-0947Fix available10.0 High
- mit kerberos 5, apple mac os x, mac os x server +7 more +9 moreThe Kerberos 4 support in KDC in MIT Kerberos 5 (krb5kdc) does not properly clear the unused...CVE-2008-0063Fix available7.5 High
- mit kerberos 5, canonical ubuntu linux, debian linux +1 more +3 moreKDC in MIT Kerberos 5 (krb5kdc) does not set a global variable for some krb4 message types, which...CVE-2008-0062Fix availableEPSS 10.1%9.8 Critical
- mit kerberos 5Double free vulnerability in the krb5_def_store_mkey function in lib/kdb/kdb_default.c in MIT...CVE-2007-5972Fix available9.0 High
- mit kerberos 5Double free vulnerability in the gss_krb5int_make_seal_token_v3 function in lib/gssapi/krb5...CVE-2007-5971Fix available6.9 Medium
- mit kerberos 5Integer overflow in the svcauth_gss_get_principal function in lib/rpc/svc_auth_gss.c in MIT...CVE-2007-5902Fix available10.0 High
- mit kerberos 5Use-after-free vulnerability in the gss_indicate_mechs function in lib/gssapi/mechglue...CVE-2007-5901Fix available6.9 Medium
- mit kerberos 5** DISPUTED ** The reply function in ftpd.c in the gssftp ftpd in MIT Kerberos 5 (krb5) does not...CVE-2007-5894Fix availableDisputed9.3 High
- mit kerberos 5The original patch for CVE-2007-3999 in svc_auth_gss.c in the RPCSEC_GSS RPC library in MIT...CVE-2007-4743Fix available10.0 High
- mit kerberos 5, fedoraproject fedora +1 moreThe kadm5_modify_policy_internal function in lib/kadm5/srv/svr_policy.c in the Kerberos...CVE-2007-4000Fix available8.5 High
- mit kerberos 5Stack-based buffer overflow in the svcauth_gss_validate function in lib/rpc/svc_auth_gss.c in the...CVE-2007-3999Fix availableEPSS 11.0%10.0 High
- canonical ubuntu linux, debian linux, mit kerberos 5 +2 moreStack-based buffer overflow in the rename_principal_2_svc function in kadmind for MIT Kerberos 1...CVE-2007-2798Fix available9.0 High
- mit kerberos 5, canonical ubuntu linux, debian linux +2 moreInteger signedness error in the gssrpc__svcauth_unix function in svc_auth_unix.c in the RPC...CVE-2007-2443Fix available8.3 High
- Show moreLoading…