CVE-2024-26461

Exploit

EPSS 1.13%
Veröffentlicht 29.02.2024 01:44:18
Zuletzt bearbeitet 23.05.2025 15:30:30
Erkennungen
Login

Kerberos 5 (aka krb5) 1.21.2 contains a memory leak vulnerability in /krb5/src/lib/gssapi/krb5/k5sealv3.c.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 5

NVD 9 VulnDex Vulnerability Enrichment 1

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Mit ≫ Kerberos 5 Version 1.21.2

Netapp ≫ Active Iq Unified Manager Version - SwPlatform vmware_vsphere

Netapp ≫ Cloud Volumes Ontap Mediator Version -

Netapp ≫ Management Services For Element Software And Netapp Hci Version -

Netapp ≫ Ontap 9 Version -

Netapp ≫ Ontap Select Deploy Administration Utility Version -

Netapp ≫ H610c Firmware Version -

Netapp ≫ H610c Version -

Netapp ≫ H610s Firmware Version -

Netapp ≫ H610s Version -

Netapp ≫ H615c Firmware Version -

Netapp ≫ H615c Version -

VulnDex Vulnerability Enrichment

Diese Information steht angemeldeten Benutzern zur Verfügung.

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	1.13%	0.621

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
CISA-ADP	7.5	3.9	3.6	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-770 Allocation of Resources Without Limits or Throttling

The product allocates a reusable resource or group of resources on behalf of an actor without imposing any intended restrictions on the size or number of resources that can be allocated.

https://github.com/LuMingYinDetect/krb5_defects/blob/main/krb5_detect_2.md

Exploit

https://security.netapp.com/advisory/ntap-20240415-0011/

Third Party Advisory

https://nvd.nist.gov/vuln/detail/CVE-2024-26461

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2024-26461

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2024-26461

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2024-26461