CVE-2008-0948

概要

参考情報

• lists.opensuse.org/opensuse-security-announce/2008-03/msg00006.html
• marc.info
• secunia.com/advisories/29423
• secunia.com/advisories/29424
• secunia.com/advisories/29428 · Vendor Advisory
• secunia.com/advisories/29663
• secunia.com/advisories/30535
• securityreason.com/securityalert/3752
• support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5022520.html
• support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5022542.html
• web.mit.edu/kerberos/advisories/MITKRB5-SA-2008-002.txt
• kb.cert.org/vuls/id/374121 · US Government Resource
• redhat.com/support/errata/RHSA-2008-0181.html
• securityfocus.com/archive/1/489762/100/0/threaded
• securityfocus.com/archive/1/489784/100/0/threaded
• securityfocus.com/archive/1/493080/100/0/threaded
• securityfocus.com/bid/28302
• securitytracker.com/id
• us-cert.gov/cas/techalerts/TA08-079B.html · US Government Resource
• vmware.com/security/advisories/VMSA-2008-0009.html
• vupen.com/english/advisories/2008/0922/references
• vupen.com/english/advisories/2008/1102/references
• vupen.com/english/advisories/2008/1744
• exchange.xforce.ibmcloud.com/vulnerabilities/41274
• oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9209

kerberos 5 のその他の脆弱性

• CVE-2026-40356高 7.5In MIT Kerberos 5 (aka krb5) before 1.22.3, there is an integer underflow and resultant out-of-bounds read if an application calls gss_accep…
• CVE-2026-40355高 7.5In MIT Kerberos 5 (aka krb5) before 1.22.3, there is a NULL pointer dereference if an application calls gss_accept_sec_context() on a system…
• CVE-2024-37371緊急 9.1In MIT Kerberos 5 (aka krb5) before 1.21.3, an attacker can cause invalid memory reads during GSS message token handling by sending message …
• CVE-2024-37370高 7.5In MIT Kerberos 5 (aka krb5) before 1.21.3, an attacker can modify the plaintext Extra Count field of a confidential GSS krb5 wrap token, ca…
• CVE-2024-26462中 5.5Kerberos 5 (aka krb5) 1.21.2 contains a memory leak vulnerability in /krb5/src/kdc/ndr.c.