CVE-2010-4020

概要

参考情報

• kb.vmware.com/kb/1035108
• lists.apple.com/archives/security-announce/2011/Mar/msg00006.html
• lists.fedoraproject.org/pipermail/package-announce/2010-December/051976.html
• lists.fedoraproject.org/pipermail/package-announce/2010-December/051999.html
• lists.opensuse.org/opensuse-security-announce/2010-12/msg00000.html
• lists.opensuse.org/opensuse-security-announce/2010-12/msg00006.html
• lists.vmware.com/pipermail/security-announce/2011/000133.html
• osvdb.org/69608
• secunia.com/advisories/42399 · Vendor Advisory
• support.apple.com/kb/HT4581
• web.mit.edu/kerberos/advisories/MITKRB5-SA-2010-007.txt · Vendor Advisory
• mandriva.com/security/advisories
• oracle.com/technetwork/topics/security/cpujul2015-2367936.html · Patch
• redhat.com/support/errata/RHSA-2010-0925.html
• securityfocus.com/archive/1/514953/100/0/threaded
• securityfocus.com/archive/1/517739/100/0/threaded
• securityfocus.com/bid/45117
• securitytracker.com/id
• ubuntu.com/usn/USN-1030-1
• vmware.com/security/advisories/VMSA-2011-0007.html
• vupen.com/english/advisories/2010/3094
• vupen.com/english/advisories/2010/3095
• vupen.com/english/advisories/2010/3118

kerberos 5 のその他の脆弱性

• CVE-2026-40356高 7.5In MIT Kerberos 5 (aka krb5) before 1.22.3, there is an integer underflow and resultant out-of-bounds read if an application calls gss_accep…
• CVE-2026-40355高 7.5In MIT Kerberos 5 (aka krb5) before 1.22.3, there is a NULL pointer dereference if an application calls gss_accept_sec_context() on a system…
• CVE-2024-37371緊急 9.1In MIT Kerberos 5 (aka krb5) before 1.21.3, an attacker can cause invalid memory reads during GSS message token handling by sending message …
• CVE-2024-37370高 7.5In MIT Kerberos 5 (aka krb5) before 1.21.3, an attacker can modify the plaintext Extra Count field of a confidential GSS krb5 wrap token, ca…
• CVE-2024-26462中 5.5Kerberos 5 (aka krb5) 1.21.2 contains a memory leak vulnerability in /krb5/src/kdc/ndr.c.