KE
Product
Kerberos
33
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 3Low 1
Watch
Add Kerberos to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-5709 | 7.5 | Jan 16 | An issue was discovered in MIT Kerberos 5 (aka krb5) through 1.16 Affected: through 5-1.16 |
| CVE-2018-5710 | 6.5 | Jan 16 | An issue was discovered in MIT Kerberos 5 (aka krb5) through 1.16 Affected: through 5-1.16 |
| CVE-2017-11368 | 6.5 | Aug 9 | In MIT Kerberos 5 (aka krb5) 1.7 and later, an authenticated attacker can cause a KDC assertion failure by sending invalid S4U2Self or S4U2Proxy requests Affected: 5-1.13.7 |
| CVE-2018-20217 | 5.3 | Dec 26 | A Reachable Assertion issue was discovered in the KDC in MIT Kerberos 5 (aka krb5) before 1.17 Affected: before 5-1.17 |
| CVE-2010-1323 | 3.7 | Dec 2 | MIT Kerberos 5 (aka krb5) 1.3.x, 1.4.x, 1.5.x, 1.6.x, 1.7.x, and 1.8.x through 1.8.3 does not properly determine the acceptability of checksums, which might allow remote attackers… Affected: 5-1.5.4 |
| CVE-2014-5354 | – | Dec 16 | plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c in MIT Kerberos 5 (aka krb5) 1.12.x and 1.13.x before 1.13.1, when the KDC uses LDAP, allows remote authenticated users to cause a… Affected: 5_1.13 |
| CVE-2014-4342 | – | Jul 20 | MIT Kerberos 5 (aka krb5) 1.7.x through 1.12.x before 1.12.2 allows remote attackers to cause a denial of service (buffer over-read or NULL pointer dereference, and application… Affected: 5-1.8; 5-1.10.5; 5-1.10.6; 5-1.10.7 |
| CVE-2013-6800 | – | Nov 18 | An unspecified third-party database module for the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.10.x allows remote authenticated users to cause a denial of service… Affected: 5-1.10.5; 5-1.10.6; 5-1.10.7 |
| CVE-2011-0282 | – | Feb 10 | The Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.6.x through 1.9, when an LDAP backend is used, allows remote attackers to cause a denial of service (NULL pointer… Affected: 5-1.6.3 |
| CVE-2011-0281 | – | Feb 10 | The unparse implementation in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.6.x through 1.9, when an LDAP backend is used, allows remote attackers to cause a… Affected: 5-1.6.3 |
| CVE-2010-0283 | – | Feb 22 | The Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.7 before 1.7.2, and 1.8 alpha, allows remote attackers to cause a denial of service (assertion failure and daemon… Affected: 5-1.8 |
| CVE-2009-4212 | – | Jan 13 | Multiple integer underflows in the (1) AES and (2) RC4 decryption functionality in the crypto library in MIT Kerberos 5 (aka krb5) 1.3 through 1.6.3, and 1.7 before 1.7.1, allow… Affected: 5-1.6.3 |
| CVE-2009-0847 | – | Apr 9 | The asn1buf_imbed function in the ASN.1 decoder in MIT Kerberos 5 (aka krb5) 1.6.3, when PK-INIT is used, allows remote attackers to cause a denial of service (application crash)… Affected: 5-1.6.3 |
| CVE-2009-0844 | – | Apr 9 | The get_input_token function in the SPNEGO implementation in MIT Kerberos 5 (aka krb5) 1.5 through 1.6.3 allows remote attackers to cause a denial of service (daemon crash) and… Affected: 5-1.6.3 |
| CVE-2009-0845 | – | Mar 27 | The spnego_gss_accept_sec_context function in lib/gssapi/spnego/spnego_mech.c in MIT Kerberos 5 (aka krb5) 1.5 through 1.6.3, when SPNEGO is used, allows remote attackers to cause… Affected: 5-1.6.3 |
| CVE-2004-0523 | – | Aug 18 | Multiple buffer overflows in krb5_aname_to_localname for MIT Kerberos 5 (krb5) 1.3.3 and earlier allow remote attackers to execute arbitrary code as root Affected: 1.0; 1.0.8; 1.2.2.beta1 |
| CVE-2003-0082 | – | Apr 2 | The Key Distribution Center (KDC) in Kerberos 5 (krb5) 1.2.7 and earlier allows remote, authenticated attackers to cause a denial of service (crash) on KDCs within the same realm… Affected: 1.0; 1.2.2.beta1 |
| CVE-2003-0072 | – | Apr 2 | The Key Distribution Center (KDC) in Kerberos 5 (krb5) 1.2.7 and earlier allows remote, authenticated attackers to cause a denial of service (crash) on KDCs within the same realm… Affected: 1.0; 1.2.2.beta1 |
| CVE-2003-0139 | – | Mar 24 | Certain weaknesses in the implementation of version 4 of the Kerberos protocol (krb4) in the krb5 distribution, when triple-DES keys are used to key krb4 services, allow an… Affected: 4 |
| CVE-2003-0138 | – | Mar 24 | Version 4 of the Kerberos protocol (krb4), as used in Heimdal and other packages, allows an attacker to impersonate any principal in a realm via a chosen-plaintext attack Affected: 4 |
| CVE-2001-0554 | – | Aug 14 | Buffer overflow in BSD-based telnetd telnet daemon on various operating systems allows remote attackers to execute arbitrary commands via a set of options including AYT (Are You… Affected: 1.0 |
| CVE-2001-0417 | – | Jun 27 | Kerberos 4 (aka krb4) allows local users to overwrite arbitrary files via a symlink attack on new ticket files Affected: 4 |
| CVE-2000-0546 | – | Jun 9 | Buffer overflow in Kerberos 4 KDC program allows remote attackers to cause a denial of service via the lastrealm variable in the set_tgtkey function Affected: before 4.0; 4.0; 4.0 |
| CVE-2000-0547 | – | Jun 9 | Buffer overflow in Kerberos 4 KDC program allows remote attackers to cause a denial of service via the localrealm variable in the process_v4 function Affected: before 4.0; 4.0; 4.0 |
| CVE-2000-0550 | – | Jun 9 | Kerberos 4 KDC program improperly frees memory twice (aka "double-free"), which allows remote attackers to cause a denial of service Affected: 4.0 |
| CVE-2000-0549 | – | Jun 9 | Kerberos 4 KDC program does not properly check for null termination of AUTH_MSG_KDC_REQUEST requests, which allows remote attackers to cause a denial of service via a malformed… Affected: 4.0 |
| CVE-2000-0548 | – | Jun 9 | Buffer overflow in Kerberos 4 KDC program allows remote attackers to cause a denial of service via the e_msg variable in the kerb_err_reply function Affected: before 4.0; 4.0; 4.0 |
| CVE-2000-0390 | – | May 16 | Buffer overflow in krb425_conv_principal function in Kerberos 5 allows remote attackers to gain root privileges Affected: 4.0 |
| CVE-2000-0392 | – | May 16 | Buffer overflow in ksu in Kerberos 5 allows local users to gain root privileges Affected: 4.0 |
| CVE-2000-0391 | – | May 16 | Buffer overflow in krshd in Kerberos 5 allows remote attackers to gain root privileges Affected: 4.0 |
| CVE-2000-0389 | – | May 16 | Buffer overflow in krb_rd_req function in Kerberos 4 and 5 allows remote attackers to gain root privileges Affected: 4.0 |
| CVE-1999-1321 | – | Nov 5 | Buffer overflow in ssh 1.2.26 client with Kerberos V enabled could allow remote attackers to cause a denial of service or execute arbitrary commands via a long DNS hostname that… Affected: v |
| CVE-1999-0143 | – | Feb 21 | Kerberos 4 key servers allow a user to masquerade as another by breaking and generating session keys Affected: 4.0 |
Showing 33