Kerberos
MIT · 31 CVEs
krb5: Reachable assertion in the KDC using S4U2Self requests
Dec 26, 2018
krb5: null pointer deference in strlen function in plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c
Jan 16, 2018
krb5: integer overflow in dbentry->n_key_data in kadmin/dbutil/dump.c
Jan 16, 2018
krb5: Invalid S4U2Self or S4U2Proxy request causes assertion failure
Aug 9, 2017
krb5: NULL pointer dereference when using keyless entries
Dec 16, 2014
krb5: denial of service flaws when handling RFC 1964 tokens
Jul 20, 2014
krb5: KDC remote DoS (NULL pointer dereference and daemon crash)
Nov 16, 2013
krb5: KDC crash when using LDAP backend caused by a special principal name (MITKRB5-SA-2011-002)
Feb 10, 2011
krb5: KDC hang when using LDAP backend caused by special principal name (MITKRB5-SA-2011-002)
Feb 10, 2011
krb5: incorrect acceptance of certain checksums (MITKRB5-SA-2010-007)
Dec 2, 2010
krb5 KDC denial of service
Feb 21, 2010
krb: KDC integer overflows in AES and RC4 decryption routines (MITKRB5-SA-2009-004)
Jan 13, 2010
krb5: incorrect length check inside ASN.1 decoder (MITKRB5-SA-2009-001)
Apr 9, 2009
krb5: buffer over-read in SPNEGO GSS-API mechanism (MITKRB5-SA-2009-001)
Apr 9, 2009
krb5: NULL pointer dereference in GSSAPI SPNEGO (MITKRB5-SA-2009-001)
Mar 27, 2009
security flaw
Jun 3, 2004
security flaw
Mar 26, 2003
security flaw
Mar 26, 2003
security flaw
Mar 21, 2003
security flaw
Mar 21, 2003
security flaw
Mar 9, 2002
security flaw
May 24, 2001
security flaw
Oct 13, 2000
security flaw
Oct 13, 2000
security flaw
Oct 13, 2000
| CVE ID | Description | Severity | EPSS | Published |
|---|---|---|---|---|
| CVE-2018-20217 | krb5: Reachable assertion in the KDC using S4U2Self requests | MEDIUM | 1.42% | Dec 26, 2018 |
| CVE-2018-5710 | krb5: null pointer deference in strlen function in plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c | MEDIUM | 1.80% | Jan 16, 2018 |
| CVE-2018-5709 | krb5: integer overflow in dbentry->n_key_data in kadmin/dbutil/dump.c | HIGH | 2.05% | Jan 16, 2018 |
| CVE-2017-11368 | krb5: Invalid S4U2Self or S4U2Proxy request causes assertion failure | MEDIUM | 2.40% | Aug 9, 2017 |
| CVE-2014-5354 | krb5: NULL pointer dereference when using keyless entries | LOW | 1.74% | Dec 16, 2014 |
| CVE-2014-4342 | krb5: denial of service flaws when handling RFC 1964 tokens | MEDIUM | 6.52% | Jul 20, 2014 |
| CVE-2013-6800 | krb5: KDC remote DoS (NULL pointer dereference and daemon crash) | MEDIUM | 2.61% | Nov 16, 2013 |
| CVE-2011-0282 | krb5: KDC crash when using LDAP backend caused by a special principal name (MITKRB5-SA-2011-002) | MEDIUM | 3.48% | Feb 10, 2011 |
| CVE-2011-0281 | krb5: KDC hang when using LDAP backend caused by special principal name (MITKRB5-SA-2011-002) | MEDIUM | 4.20% | Feb 10, 2011 |
| CVE-2010-1323 | krb5: incorrect acceptance of certain checksums (MITKRB5-SA-2010-007) | LOW | 2.85% | Dec 2, 2010 |
| CVE-2010-0283 | krb5 KDC denial of service | HIGH | 2.41% | Feb 21, 2010 |
| CVE-2009-4212 | krb: KDC integer overflows in AES and RC4 decryption routines (MITKRB5-SA-2009-004) | HIGH | 7.55% | Jan 13, 2010 |
| CVE-2009-0847 | krb5: incorrect length check inside ASN.1 decoder (MITKRB5-SA-2009-001) | MEDIUM | 2.77% | Apr 9, 2009 |
| CVE-2009-0844 | krb5: buffer over-read in SPNEGO GSS-API mechanism (MITKRB5-SA-2009-001) | MEDIUM | 4.32% | Apr 9, 2009 |
| CVE-2009-0845 | krb5: NULL pointer dereference in GSSAPI SPNEGO (MITKRB5-SA-2009-001) | MEDIUM | 5.63% | Mar 27, 2009 |
| CVE-2004-0523 | security flaw | HIGH | 11.67% | Jun 3, 2004 |
| CVE-2003-0082 | security flaw | MEDIUM | 2.69% | Mar 26, 2003 |
| CVE-2003-0072 | security flaw | MEDIUM | 1.95% | Mar 26, 2003 |
| CVE-2003-0139 | security flaw | HIGH | 4.28% | Mar 21, 2003 |
| CVE-2003-0138 | security flaw | HIGH | 4.28% | Mar 21, 2003 |
| CVE-2001-0554 | security flaw | HIGH | 38.75% | Mar 9, 2002 |
| CVE-2001-0417 | security flaw | LOW | 0.41% | May 24, 2001 |
| CVE-2000-0550 | security flaw | MEDIUM | 2.40% | Oct 13, 2000 |
| CVE-2000-0549 | security flaw | MEDIUM | 2.28% | Oct 13, 2000 |
| CVE-2000-0548 | security flaw | MEDIUM | 2.89% | Oct 13, 2000 |
Showing 1 to 25 of 31 CVEs