CVE-2009-0846

緊急 10.0CVE-2009-0846 · 09/04/2009 公開 · 16/06/2026 更新

要点

CVE-2009-0846 は kerberos 5 (mit) に影響する深刻度「緊急」 (CVSS 10.0) の脆弱性です。
今後30日間に悪用される確率（EPSS）：8.9%（全脆弱性の 95.2% より高い）。
対処：1.6.4 以降に更新してください。

パッケージ	影響を受けるバージョン	修正済みバージョン
kerberos 5 mit	`< 1.6.4`	`1.6.4`

概要

The asn1_decode_generaltime function in lib/krb5/asn.1/asn1_decode.c in the ASN.1 GeneralizedTime decoder in MIT Kerberos 5 (aka krb5) before 1.6.4 allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via vectors involving an invalid DER encoding that triggers a free of an uninitialized pointer.

参考情報

lists.apple.com/archives/security-announce/2009/May/msg00002.html · Mailing List
lists.vmware.com/pipermail/security-announce/2009/000059.html · Broken Link
marc.info · Third Party Advisory
marc.info · Third Party Advisory
rhn.redhat.com/errata/RHSA-2009-0409.html · Third Party Advisory
rhn.redhat.com/errata/RHSA-2009-0410.html · Third Party Advisory
secunia.com/advisories/34594 · Broken Link
secunia.com/advisories/34598 · Broken Link
secunia.com/advisories/34617 · Broken Link
secunia.com/advisories/34622 · Broken Link
secunia.com/advisories/34628 · Broken Link
secunia.com/advisories/34630 · Broken Link
secunia.com/advisories/34637 · Broken Link
secunia.com/advisories/34640 · Broken Link
secunia.com/advisories/34734 · Broken Link
secunia.com/advisories/35074 · Broken Link
secunia.com/advisories/35667 · Broken Link
security.gentoo.org/glsa/glsa-200904-09.xml · Third Party Advisory
sunsolve.sun.com/search/document.do · Broken Link
support.apple.com/kb/HT3549 · Third Party Advisory
support.avaya.com/elmodocs2/security/ASA-2009-142.htm · Third Party Advisory
support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5047180.html · Broken Link
support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5047181.html · Broken Link
web.mit.edu/kerberos/advisories/MITKRB5-SA-2009-002.txt · Patch
wiki.rpath.com/Advisories:rPSA-2009-0058 · Broken Link
wiki.rpath.com/wiki/Advisories:rPSA-2009-0058 · Broken Link
www-01.ibm.com/support/docview.wss · Broken Link
kb.cert.org/vuls/id/662091 · Broken Link
mandriva.com/security/advisories · Broken Link
redhat.com/support/errata/RHSA-2009-0408.html · Broken Link
securityfocus.com/archive/1/502527/100/0/threaded · Broken Link
securityfocus.com/archive/1/502546/100/0/threaded · Broken Link
securityfocus.com/archive/1/504683/100/0/threaded · Broken Link
securityfocus.com/bid/34409 · Broken Link
securitytracker.com/id · Broken Link
ubuntu.com/usn/usn-755-1 · Third Party Advisory
us-cert.gov/cas/techalerts/TA09-133A.html · Third Party Advisory
vmware.com/security/advisories/VMSA-2009-0008.html · Third Party Advisory
vupen.com/english/advisories/2009/0960 · Broken Link
vupen.com/english/advisories/2009/0976 · Broken Link
vupen.com/english/advisories/2009/1057 · Broken Link
vupen.com/english/advisories/2009/1106 · Broken Link
vupen.com/english/advisories/2009/1297 · Broken Link
vupen.com/english/advisories/2009/2084 · Broken Link
vupen.com/english/advisories/2009/2248 · Broken Link
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10694 · Broken Link
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5483 · Broken Link
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6301 · Broken Link
redhat.com/archives/fedora-package-announce/2009-April/msg00205.html · Mailing List
redhat.com/archives/fedora-package-announce/2009-April/msg00206.html · Mailing List

kerberos 5 のその他の脆弱性

すべて見る →

これらの製品をお使いですか？サイトをスキャンして、脆弱なバージョンが公開されていないか確認しましょう。

無料でサイトをスキャン