CVE-2004-0643

概要

参考情報

• distro.conectiva.com.br/atualizacoes · Broken Link
• marc.info · Issue Tracking
• rhn.redhat.com/errata/RHSA-2004-350.html · Third Party Advisory
• web.mit.edu/kerberos/www/advisories/MITKRB5-SA-2004-002-dblfree.txt · Patch
• debian.org/security/2004/dsa-543 · Third Party Advisory
• gentoo.org/security/en/glsa/glsa-200409-09.xml · Vendor Advisory
• kb.cert.org/vuls/id/866472 · Third Party Advisory
• securityfocus.com/bid/11078 · Third Party Advisory
• trustix.net/errata/2004/0045 · Broken Link
• us-cert.gov/cas/techalerts/TA04-247A.html · Third Party Advisory
• exchange.xforce.ibmcloud.com/vulnerabilities/17159 · Third Party Advisory
• oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10267 · Broken Link
• oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3322 · Broken Link

kerberos 5 のその他の脆弱性

• CVE-2026-40356高 7.5In MIT Kerberos 5 (aka krb5) before 1.22.3, there is an integer underflow and resultant out-of-bounds read if an application calls gss_accep…
• CVE-2026-40355高 7.5In MIT Kerberos 5 (aka krb5) before 1.22.3, there is a NULL pointer dereference if an application calls gss_accept_sec_context() on a system…
• CVE-2024-37371緊急 9.1In MIT Kerberos 5 (aka krb5) before 1.21.3, an attacker can cause invalid memory reads during GSS message token handling by sending message …
• CVE-2024-37370高 7.5In MIT Kerberos 5 (aka krb5) before 1.21.3, an attacker can modify the plaintext Extra Count field of a confidential GSS krb5 wrap token, ca…
• CVE-2024-26462中 5.5Kerberos 5 (aka krb5) 1.21.2 contains a memory leak vulnerability in /krb5/src/kdc/ndr.c.