Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

mit kerberos 5 1.11.5 vulnerabilities and exploits

(subscribe to this query)
8.5
CVSSv2
CVE-2014-4345
Off-by-one error in the krb5_encode_krbsecretkey function in plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c in the LDAP KDB module in kadmind in MIT Kerberos 5 (aka krb5) 1.6.x up to and including 1.11.x prior to 1.11.6 and 1.12.x prior to 1.12.2 allows remote authenticated users...
Mit Kerberos 5 1.10.1Mit Kerberos 5 1.10.2Mit Kerberos 5 1.11.4Mit Kerberos 5 1.6Mit Kerberos 5 1.8.2Mit Kerberos 5 1.8.3Mit Kerberos 5 1.8.4Mit Kerberos 5 1.9.4Mit Kerberos 5 1.10.3Mit Kerberos 5 1.10.4Mit Kerberos 5 1.6.1Mit Kerberos 5 1.6.2Mit Kerberos 5 1.8.5Mit Kerberos 5 1.8.6Mit Kerberos 5 1.11.5Mit Kerberos 5 1.12Mit Kerberos 5 1.11Mit Kerberos 5 1.11.1Mit Kerberos 5 1.7Mit Kerberos 5 1.7.1Mit Kerberos 5 1.9Mit Kerberos 5 1.9.1
5
CVSSv2
CVE-2014-5355
MIT Kerberos 5 (aka krb5) up to and including 1.13.1 incorrectly expects that a krb5_read_message data field is represented as a string ending with a '\0' character, which allows remote malicious users to (1) cause a denial of service (NULL pointer dereference) via a ze...
Mit Kerberos 5 1.2.2Mit Kerberos 5 1.2.3Mit Kerberos 5 1.3Mit Kerberos 5 1.3.1Mit Kerberos 5 1.4.1Mit Kerberos 5 1.4.2Mit Kerberos 5 1.6.1Mit Kerberos 5 1.6.2Mit Kerberos 5 1.8.4Mit Kerberos 5 1.8.5Mit Kerberos 5 1.10Mit Kerberos 5 1.10.1Mit Kerberos 5 1.10.2Mit Kerberos 5 1.11.4Mit Kerberos 5 1.11.5Mit Kerberos 5 1.1Mit Kerberos 5 1.2.6Mit Kerberos 5 1.2.7Mit Kerberos 5 1.3.4Mit Kerberos 5 1.3.5Mit Kerberos 5 1.5.1Mit Kerberos 5 1.5.2
NA
CVE-2023-39975
kdc/do_tgs_req.c in MIT Kerberos 5 (aka krb5) 1.21 prior to 1.21.2 has a double free that is reachable if an authenticated user can trigger an authorization-data handling failure. Incorrect data is copied from one ticket to another.
Mit Kerberos 5
NA
CVE-2023-36054
lib/kadm5/kadm_rpc_xdr.c in MIT Kerberos 5 (aka krb5) prior to 1.20.2 and 1.21.x prior to 1.21.1 frees an uninitialized pointer. A remote authenticated user can trigger a kadmind crash. This occurs because _xdr_kadm5_principal_ent_rec does not validate the relationship between n_...
Mit Kerberos 5 1.21Mit Kerberos 5Debian Debian Linux 10.0Netapp Hci -Netapp Active Iq Unified Manager -Netapp Management Services For Element Software -Netapp Ontap Tools -Netapp Clustered Data Ontap 9.0
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2022-48654CVE-2024-2757authentication bypassCVE-2024-3194CVE-2024-33640CVE-2024-21111dosinsecure direct object referenceCVE-2024-21345
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook