Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

mit kerberos 5 1.13 vulnerabilities and exploits

(subscribe to this query)
4
CVSSv2
CVE-2016-3120
The validate_as_request function in kdc_util.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) prior to 1.13.6 and 1.4.x prior to 1.14.3, when restrict_anonymous_to_tgt is enabled, uses an incorrect client data structure, which allows remote authenticated users ...
Mit Kerberos 5 1.13Mit Kerberos 5 1.13.1Mit Kerberos 5 1.13.2Mit Kerberos 5 1.13.3Mit Kerberos 5 1.13.4Mit Kerberos 5 1.13.5Mit Kerberos 5 1.13.6Mit Kerberos 5 1.14Mit Kerberos 5 1.14.1Mit Kerberos 5 1.14.2
5
CVSSv2
CVE-2014-5355
MIT Kerberos 5 (aka krb5) up to and including 1.13.1 incorrectly expects that a krb5_read_message data field is represented as a string ending with a '\0' character, which allows remote malicious users to (1) cause a denial of service (NULL pointer dereference) via a ze...
Mit Kerberos 5 1.2.2Mit Kerberos 5 1.2.3Mit Kerberos 5 1.3Mit Kerberos 5 1.3.1Mit Kerberos 5 1.4.1Mit Kerberos 5 1.4.2Mit Kerberos 5 1.6.1Mit Kerberos 5 1.6.2Mit Kerberos 5 1.8.4Mit Kerberos 5 1.8.5Mit Kerberos 5 1.10Mit Kerberos 5 1.10.1Mit Kerberos 5 1.10.2Mit Kerberos 5 1.11.4Mit Kerberos 5 1.11.5Mit Kerberos 5 1.1Mit Kerberos 5 1.2.6Mit Kerberos 5 1.2.7Mit Kerberos 5 1.3.4Mit Kerberos 5 1.3.5Mit Kerberos 5 1.5.1Mit Kerberos 5 1.5.2
3.5
CVSSv2
CVE-2014-5354
plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c in MIT Kerberos 5 (aka krb5) 1.12.x and 1.13.x prior to 1.13.1, when the KDC uses LDAP, allows remote authenticated users to cause a denial of service (NULL pointer dereference and daemon crash) by creating a database entry for a key...
Mit Kerberos 5 1.13Mit Kerberos 5 1.12.1Mit Kerberos 5 1.12Mit Kerberos 5 1.12.2
2.1
CVSSv2
CVE-2014-5351
The kadm5_randkey_principal_3 function in lib/kadm5/srv/svr_principal.c in kadmind in MIT Kerberos 5 (aka krb5) prior to 1.13 sends old keys in a response to a -randkey -keepold request, which allows remote authenticated users to forge tickets by leveraging administrative access.
Mit Kerberos 5 1.12.2
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
XXECVE-2024-34490SQL injectionCVE-2024-34488CVE-2024-4507CVE-2023-7028CVE-2024-23187TCPCVE-2024-4439
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook