| Package | Affected versions | Patched versions |
|---|---|---|
| kerberos 5 | < 1.21.3 | 1.21.3 |
In MIT Kerberos 5 (aka krb5) before 1.21.3, an attacker can cause invalid memory reads during GSS message token handling by sending message tokens with invalid length fields.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free