Mit

Kerberos 5

137 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5.3

CVE-2016-3119

  • EPSS 5.72%
  • Published 26.03.2016 01:59:05
  • Last modified 12.04.2025 10:46:40

The process_db_args function in plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c in the LDAP KDB module in kadmind in MIT Kerberos 5 (aka krb5) through 1.13.4 and 1.14.x through 1.14.1 mishandles the DB argument, which allows remote authenticated users...

6.5

CVE-2015-8631

  • EPSS 1.56%
  • Published 13.02.2016 02:59:02
  • Last modified 12.04.2025 10:46:40

Multiple memory leaks in kadmin/server/server_stubs.c in kadmind in MIT Kerberos 5 (aka krb5) before 1.13.4 and 1.14.x before 1.14.1 allow remote authenticated users to cause a denial of service (memory consumption) via a request specifying a NULL pr...

7.5

CVE-2015-8630

  • EPSS 0.75%
  • Published 13.02.2016 02:59:01
  • Last modified 12.04.2025 10:46:40

The (1) kadm5_create_principal_3 and (2) kadm5_modify_principal functions in lib/kadm5/srv/svr_principal.c in kadmind in MIT Kerberos 5 (aka krb5) 1.12.x and 1.13.x before 1.13.4 and 1.14.x before 1.14.1 allow remote authenticated users to cause a de...

5.3

CVE-2015-8629

  • EPSS 0.68%
  • Published 13.02.2016 02:59:00
  • Last modified 12.04.2025 10:46:40

The xdr_nullstring function in lib/kadm5/kadm_rpc_xdr.c in kadmind in MIT Kerberos 5 (aka krb5) before 1.13.4 and 1.14.x before 1.14.1 does not verify whether '\0' characters exist as expected, which allows remote authenticated users to obtain sensit...

8.5

CVE-2015-2698

  • EPSS 1.17%
  • Published 13.11.2015 03:59:00
  • Last modified 12.04.2025 10:46:40

The iakerb_gss_export_sec_context function in lib/gssapi/krb5/iakerb.c in MIT Kerberos 5 (aka krb5) 1.14 pre-release 2015-09-14 improperly accesses a certain pointer, which allows remote authenticated users to cause a denial of service (memory corrup...

4

CVE-2015-2697

  • EPSS 6.39%
  • Published 09.11.2015 03:59:03
  • Last modified 12.04.2025 10:46:40

The build_principal_va function in lib/krb5/krb/bld_princ.c in MIT Kerberos 5 (aka krb5) before 1.14 allows remote authenticated users to cause a denial of service (out-of-bounds read and KDC crash) via an initial '\0' character in a long realm field...

7.1

CVE-2015-2696

  • EPSS 8.28%
  • Published 09.11.2015 03:59:02
  • Last modified 12.04.2025 10:46:40

lib/gssapi/krb5/iakerb.c in MIT Kerberos 5 (aka krb5) before 1.14 relies on an inappropriate context handle, which allows remote attackers to cause a denial of service (incorrect pointer read and process crash) via a crafted IAKERB packet that is mis...

5

CVE-2015-2695

  • EPSS 4.77%
  • Published 09.11.2015 03:59:00
  • Last modified 12.04.2025 10:46:40

lib/gssapi/spnego/spnego_mech.c in MIT Kerberos 5 (aka krb5) before 1.14 relies on an inappropriate context handle, which allows remote attackers to cause a denial of service (incorrect pointer read and process crash) via a crafted SPNEGO packet that...

5.8

CVE-2015-2694

  • EPSS 0.13%
  • Published 25.05.2015 19:59:02
  • Last modified 12.04.2025 10:46:40

The kdcpreauth modules in MIT Kerberos 5 (aka krb5) 1.12.x and 1.13.x before 1.13.2 do not properly track whether a client's request has been validated, which allows remote attackers to bypass an intended preauthentication requirement by providing (1...

5

CVE-2014-5355

  • EPSS 3.59%
  • Published 20.02.2015 11:59:00
  • Last modified 12.04.2025 10:46:40

MIT Kerberos 5 (aka krb5) through 1.13.1 incorrectly expects that a krb5_read_message data field is represented as a string ending with a '\0' character, which allows remote attackers to (1) cause a denial of service (NULL pointer dereference) via a ...