K5
Product
Kerberos 5
140
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 6High 13Medium 13Low 3
Watch
Add Kerberos 5 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2014-4343 | – | Aug 14 | Double free vulnerability in the init_ctx_reselect function in the SPNEGO initiator in lib/gssapi/spnego/spnego_mech.c in MIT Kerberos 5 (aka krb5) 1.10.x through 1.12.x before… Affected: 1.10; 1.10.1; 1.10.2; 1.10.3; 1.10.4; 1.11; +7 more |
| CVE-2014-4342 | – | Jul 20 | MIT Kerberos 5 (aka krb5) 1.7.x through 1.12.x before 1.12.2 allows remote attackers to cause a denial of service (buffer over-read or NULL pointer dereference, and application… Affected: 1.7; 1.7.1; 1.8; 1.8.1; 1.8.2; 1.8.3; +20 more |
| CVE-2014-4341 | – | Jul 20 | MIT Kerberos 5 (aka krb5) before 1.12.2 allows remote attackers to cause a denial of service (buffer over-read and application crash) by injecting invalid tokens into a GSSAPI… Affected: before 1.12.2 |
| CVE-2013-1417 | – | Nov 20 | do_tgs_req.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.11 before 1.11.4, when a single-component realm name is used, allows remote authenticated users to… Affected: 1.11; 1.11.1; 1.11.2; 1.11.3 |
| CVE-2013-1418 | – | Nov 18 | The setup_server_realm function in main.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.10.7, when multiple realms are configured, allows remote… Affected: before 1.10.7 |
| CVE-2013-6800 | – | Nov 18 | An unspecified third-party database module for the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.10.x allows remote authenticated users to cause a denial of service… Affected: 1.10; 1.10.1; 1.10.2; 1.10.3; 1.10.4 |
| CVE-2002-2443 | – | May 29 | schpw.c in the kpasswd service in kadmind in MIT Kerberos 5 (aka krb5) before 1.11.3 does not properly validate UDP packets before sending responses, which allows remote attackers… Affected: before 1.11.3 |
| CVE-2013-1416 | – | Apr 19 | The prep_reprocess_req function in do_tgs_req.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.10.5 does not properly perform service-principal realm… Affected: before 1.10.5 |
| CVE-2013-1415 | – | Mar 5 | The pkinit_check_kdc_pkid function in plugins/preauth/pkinit/pkinit_crypto_openssl.c in the PKINIT implementation in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5)… Affected: before 1.10.4; 1.11 |
| CVE-2012-1016 | – | Mar 5 | The pkinit_server_return_padata function in plugins/preauth/pkinit/pkinit_srv.c in the PKINIT implementation in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5)… Affected: before 1.10.4 |
| CVE-2012-1015 | – | Aug 6 | The kdc_handle_protected_negotiation function in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.8.x, 1.9.x before 1.9.5, and 1.10.x before 1.10.3 attempts to… Affected: 1.8; 1.8.1; 1.8.2; 1.8.3; 1.8.4; 1.8.5; +5 more |
| CVE-2012-1014 | – | Aug 6 | The process_as_req function in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.10.x before 1.10.3 does not initialize a certain structure member, which allows… Affected: 1.10; 1.10.1; 1.10.2 |
| CVE-2012-1013 | – | Jun 7 | The check_1_6_dummy function in lib/kadm5/srv/svr_principal.c in kadmind in MIT Kerberos 5 (aka krb5) 1.8.x, 1.9.x, and 1.10.x before 1.10.2 allows remote authenticated… Affected: 1.8; 1.8.1; 1.8.2; 1.8.3; 1.8.4; 1.8.5; +7 more |
| CVE-2012-1012 | – | Jun 7 | server/server_stubs.c in the kadmin protocol implementation in MIT Kerberos 5 (aka krb5) 1.10 before 1.10.1 does not properly restrict access to (1) SET_STRING and (2) GET_STRINGS… Affected: 1.10; 1.10.1 |
| CVE-2011-4151 | – | Oct 20 | The krb5_db2_lockout_audit function in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.8 through 1.8.4, when the db2 (aka Berkeley DB) back end is used, allows… Affected: 1.8; 1.8.1; 1.8.2; 1.8.3; 1.8.4 |
| CVE-2011-1529 | – | Oct 20 | The lookup_lockout_policy function in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.8 through 1.8.4 and 1.9 through 1.9.1, when the db2 (aka Berkeley DB) or… Affected: 1.8; 1.8.1; 1.8.2; 1.8.3; 1.8.4; 1.9; +1 more |
| CVE-2011-1528 | – | Oct 20 | The krb5_ldap_lockout_audit function in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.8 through 1.8.4 and 1.9 through 1.9.1, when the LDAP back end is used,… Affected: 1.8; 1.8.1; 1.8.2; 1.8.3; 1.8.4; 1.9; +1 more |
| CVE-2011-1527 | – | Oct 20 | The kdb_ldap plugin in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.9 through 1.9.1, when the LDAP back end is used, allows remote attackers to cause a denial… Affected: 1.9; 1.9.1 |
| CVE-2011-0285 | – | Apr 15 | The process_chpw_request function in schpw.c in the password-changing functionality in kadmind in MIT Kerberos 5 (aka krb5) 1.7 through 1.9 frees an invalid pointer, which allows… Affected: 1.7; 1.7.1; 1.8; 1.8.1; 1.8.2; 1.8.3; +1 more |
| CVE-2011-0284 | – | Mar 20 | Double free vulnerability in the prepare_error_as function in do_as_req.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.7 through 1.9, when the PKINIT… Affected: 1.7; 1.7.1; 1.8; 1.8.1; 1.8.2; 1.8.3; +1 more |
| CVE-2010-4022 | – | Feb 10 | The do_standalone function in the MIT krb5 KDC database propagation daemon (kpropd) in Kerberos 1.7, 1.8, and 1.9, when running in standalone mode, does not properly handle when a… Affected: 1.7; 1.8; 1.9 |
| CVE-2011-0281 | – | Feb 10 | The unparse implementation in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.6.x through 1.9, when an LDAP backend is used, allows remote attackers to cause a… Affected: 1.6; 1.6.1; 1.6.2; 1.7; 1.7.1; 1.8; +4 more |
| CVE-2011-0282 | – | Feb 10 | The Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.6.x through 1.9, when an LDAP backend is used, allows remote attackers to cause a denial of service (NULL pointer… Affected: 1.6; 1.6.1; 1.6.2; 1.7; 1.7.1; 1.8; +4 more |
| CVE-2011-0283 | – | Feb 10 | The Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.9 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a malformed… Affected: 1.9 |
| CVE-2010-4021 | – | Dec 2 | The Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.7 does not properly restrict the use of TGT credentials for armoring TGS requests, which might allow remote… Affected: 1.7 |
| CVE-2010-1322 | – | Oct 7 | The merge_authdata function in kdc_authdata.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.8.x before 1.8.4 does not properly manage an index into an… Affected: 1.8; 1.8.1; 1.8.2; 1.8.3 |
| CVE-2010-1321 | – | May 19 | The kg_accept_krb5 function in krb5/accept_sec_context.c in the GSS-API library in MIT Kerberos 5 (aka krb5) through 1.7.1 and 1.8 before 1.8.2, as used in kadmind and other… Affected: through 1.7.1; 1.8 before 1.8.2 |
| CVE-2010-1320 | – | Apr 22 | Double free vulnerability in do_tgs_req.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.7.x and 1.8.x before 1.8.2 allows remote authenticated users to cause… Affected: 1.7; 1.7.1; 1.8; 1.8.1 |
| CVE-2010-0628 | – | Mar 25 | The spnego_gss_accept_sec_context function in lib/gssapi/spnego/spnego_mech.c in the SPNEGO GSS-API functionality in MIT Kerberos 5 (aka krb5) 1.7 before 1.7.2 and 1.8 before… Affected: 1.7; 1.7.1; 1.8 |
| CVE-2010-0283 | – | Feb 22 | The Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.7 before 1.7.2, and 1.8 alpha, allows remote attackers to cause a denial of service (assertion failure and daemon… Affected: 1.7; 1.7.1 |
| CVE-2009-4212 | – | Jan 13 | Multiple integer underflows in the (1) AES and (2) RC4 decryption functionality in the crypto library in MIT Kerberos 5 (aka krb5) 1.3 through 1.6.3, and 1.7 before 1.7.1, allow… Affected: 1.3; 1.3.1; 1.3.2; 1.3.3; 1.3.4; 1.3.5; +14 more |
| CVE-2009-3295 | – | Dec 29 | The prep_reprocess_req function in kdc/do_tgs_req.c in the cross-realm referral implementation in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.7 before 1.7.1… Affected: 1.7 |
| CVE-2009-0846 | – | Apr 9 | The asn1_decode_generaltime function in lib/krb5/asn.1/asn1_decode.c in the ASN.1 GeneralizedTime decoder in MIT Kerberos 5 (aka krb5) before 1.6.4 allows remote attackers to… Affected: before 1.6.4 |
| CVE-2009-0844 | – | Apr 9 | The get_input_token function in the SPNEGO implementation in MIT Kerberos 5 (aka krb5) 1.5 through 1.6.3 allows remote attackers to cause a denial of service (daemon crash) and… Affected: 1.5; 1.5.1; 1.5.2; 1.5.3; 1.6; 1.6.1; +1 more |
| CVE-2009-0845 | – | Mar 27 | The spnego_gss_accept_sec_context function in lib/gssapi/spnego/spnego_mech.c in MIT Kerberos 5 (aka krb5) 1.5 through 1.6.3, when SPNEGO is used, allows remote attackers to cause… Affected: 1.5; 1.5.1; 1.5.2; 1.5.3; 1.6; 1.6.1; +1 more |
| CVE-2008-0948 | – | Mar 19 | Buffer overflow in the RPC library (lib/rpc/rpc_dtablesize.c) used by libgssrpc and kadmind in MIT Kerberos 5 (krb5) 1.2.2, and probably other versions before 1.3, when running on… Affected: 1.2.2 |
| CVE-2008-0947 | – | Mar 19 | Buffer overflow in the RPC library used by libgssrpc and kadmind in MIT Kerberos 5 (krb5) 1.4 through 1.6.3 allows remote attackers to execute arbitrary code by triggering a large… Affected: 1.4; 1.4.1; 1.4.2; 1.4.3; 1.4.4; 1.5; +7 more |
| CVE-2007-5894 | – | Dec 6 | The reply function in ftpd.c in the gssftp ftpd in MIT Kerberos 5 (krb5) does not initialize the length variable when auth_type has a certain value, which has unknown impact and… Affected: All versions, or not specified |
| CVE-2007-5972 | – | Dec 6 | Double free vulnerability in the krb5_def_store_mkey function in lib/kdb/kdb_default.c in MIT Kerberos 5 (krb5) 1.5 has unknown impact and remote authenticated attack vectors Affected: 1.5 |
| CVE-2007-5971 | – | Dec 6 | Double free vulnerability in the gss_krb5int_make_seal_token_v3 function in lib/gssapi/krb5/k5sealv3.c in MIT Kerberos 5 (krb5) has unknown impact and attack vectors Affected: through 1.6.3_kdc |
| CVE-2007-5902 | – | Dec 6 | Integer overflow in the svcauth_gss_get_principal function in lib/rpc/svc_auth_gss.c in MIT Kerberos 5 (krb5) allows remote attackers to have an unknown impact via a large length… Affected: All versions, or not specified |
| CVE-2007-5901 | – | Dec 6 | Use-after-free vulnerability in the gss_indicate_mechs function in lib/gssapi/mechglue/g_initialize.c in MIT Kerberos 5 (krb5) has unknown impact and attack vectors Affected: through 1.6.3_kdc |
| CVE-2007-4743 | – | Sep 6 | The original patch for CVE-2007-3999 in svc_auth_gss.c in the RPCSEC_GSS RPC library in MIT Kerberos 5 (krb5) 1.4 through 1.6.2, as used by the Kerberos administration daemon… Affected: 1.4; 1.4.1; 1.4.2; 1.4.3; 1.4.4; 1.5; +6 more |
| CVE-2007-4000 | – | Sep 5 | The kadm5_modify_policy_internal function in lib/kadm5/srv/svr_policy.c in the Kerberos administration daemon (kadmind) in MIT Kerberos 5 (krb5) 1.5 through 1.6.2 does not… Affected: 1.5 through 1.6.2 |
| CVE-2007-3999 | – | Sep 5 | Stack-based buffer overflow in the svcauth_gss_validate function in lib/rpc/svc_auth_gss.c in the RPCSEC_GSS RPC library (librpcsecgss) in MIT Kerberos 5 (krb5) 1.4 through 1.6.2,… Affected: 1.4; 1.4.1; 1.4.2; 1.4.3; 1.4.4; 1.5; +6 more |
| CVE-2007-2442 | – | Jun 26 | The gssrpc__svcauth_gssapi function in the RPC library in MIT Kerberos 5 (krb5) 1.6.1 and earlier might allow remote attackers to execute arbitrary code via a zero-length RPC… Affected: through 1.6.1 |
| CVE-2007-2798 | – | Jun 26 | Stack-based buffer overflow in the rename_principal_2_svc function in kadmind for MIT Kerberos 1.5.3, 1.6.1, and other versions allows remote authenticated users to execute… Affected: through 1.6.1 |
| CVE-2007-2443 | – | Jun 26 | Integer signedness error in the gssrpc__svcauth_unix function in svc_auth_unix.c in the RPC library in MIT Kerberos 5 (krb5) 1.6.1 and earlier might allow remote attackers to… Affected: through 1.6.1 |
| CVE-2007-3149 | – | Jun 11 | sudo, when linked with MIT Kerberos 5 (krb5), does not properly check whether a user can currently authenticate to Kerberos, which allows local users to gain privileges, in a… Affected: All versions, or not specified |
| CVE-2007-1216 | – | Apr 6 | Double free vulnerability in the GSS-API library (lib/gssapi/krb5/k5unseal.c), as used by the Kerberos administration daemon (kadmind) in MIT krb5 before 1.6.1, when used with the… Affected: before 1.6.1 |