CVE-2024-26458

Exploit

EPSS 0.82%
Veröffentlicht 29.02.2024 01:44:18
Zuletzt bearbeitet 23.05.2025 15:39:31
Erkennungen
Login

Kerberos 5 (aka krb5) 1.21.2 contains a memory leak in /krb5/src/lib/rpc/pmap_rmt.c.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 5

NVD 9 VulnDex Vulnerability Enrichment 1

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Mit ≫ Kerberos 5 Version 1.21.2

Netapp ≫ Active Iq Unified Manager Version - SwPlatform vmware_vsphere

Netapp ≫ Cloud Volumes Ontap Mediator Version -

Netapp ≫ Management Services For Element Software And Netapp Hci Version -

Netapp ≫ Ontap 9 Version -

Netapp ≫ Ontap Select Deploy Administration Utility Version -

Netapp ≫ H610c Firmware Version -

Netapp ≫ H610c Version -

Netapp ≫ H610s Firmware Version -

Netapp ≫ H610s Version -

Netapp ≫ H615c Firmware Version -

Netapp ≫ H615c Version -

VulnDex Vulnerability Enrichment

Diese Information steht angemeldeten Benutzern zur Verfügung.

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.82%	0.522

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
CISA-ADP	5.3	3.9	1.4	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

CWE-401 Missing Release of Memory after Effective Lifetime

The product does not sufficiently track and release allocated memory after it has been used, making the memory unavailable for reallocation and reuse.

https://github.com/LuMingYinDetect/krb5_defects/blob/main/krb5_detect_1.md

Exploit

https://security.netapp.com/advisory/ntap-20240415-0010/

Third Party Advisory

https://nvd.nist.gov/vuln/detail/CVE-2024-26458

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2024-26458

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2024-26458

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2024-26458