CVE-2013-1415

Description

References

• krbdev.mit.edu/rt/Ticket/Display.html · Vendor Advisory
• krbdev.mit.edu/rt/Ticket/Display.html · Vendor Advisory
• lists.opensuse.org/opensuse-updates/2013-03/msg00090.html · Mailing List
• secunia.com/advisories/55040 · Third Party Advisory
• web.mit.edu/kerberos/www/krb5-1.10 · Release Notes
• web.mit.edu/kerberos/www/krb5-1.11 · Release Notes
• mandriva.com/security/advisories · Third Party Advisory
• krb5/krb5 commit f249555 · Patch

More vulnerabilities in kerberos 5

• CVE-2026-40356HIGH 7.5In MIT Kerberos 5 (aka krb5) before 1.22.3, there is an integer underflow and resultant out-of-bounds read if an application calls gss_accep…
• CVE-2026-40355HIGH 7.5In MIT Kerberos 5 (aka krb5) before 1.22.3, there is a NULL pointer dereference if an application calls gss_accept_sec_context() on a system…
• CVE-2024-37371CRITICAL 9.1In MIT Kerberos 5 (aka krb5) before 1.21.3, an attacker can cause invalid memory reads during GSS message token handling by sending message …
• CVE-2024-37370HIGH 7.5In MIT Kerberos 5 (aka krb5) before 1.21.3, an attacker can modify the plaintext Extra Count field of a confidential GSS krb5 wrap token, ca…
• CVE-2024-26462MEDIUM 5.5Kerberos 5 (aka krb5) 1.21.2 contains a memory leak vulnerability in /krb5/src/kdc/ndr.c.