CVE-2014-4341

概要

参考情報

• advisories.mageia.org/MGASA-2014-0345.html · Third Party Advisory
• aix.software.ibm.com/aix/efixes/security/nas_advisory1.asc · Third Party Advisory
• krbdev.mit.edu/rt/Ticket/Display.html · Vendor Advisory
• lists.fedoraproject.org/pipermail/package-announce/2014-August/136360.html · Third Party Advisory
• rhn.redhat.com/errata/RHSA-2015-0439.html · Third Party Advisory
• secunia.com/advisories/59102 · Third Party Advisory
• secunia.com/advisories/60082 · Third Party Advisory
• secunia.com/advisories/60448 · Third Party Advisory
• security.gentoo.org/glsa/glsa-201412-53.xml · Third Party Advisory
• debian.org/security/2014/dsa-3000 · Third Party Advisory
• mandriva.com/security/advisories · Third Party Advisory
• securityfocus.com/bid/68909 · Third Party Advisory
• securitytracker.com/id/1030706 · Third Party Advisory
• exchange.xforce.ibmcloud.com/vulnerabilities/94904 · Third Party Advisory
• krb5/krb5 commit e6ae703 · Patch

kerberos 5 のその他の脆弱性

• CVE-2026-40356高 7.5In MIT Kerberos 5 (aka krb5) before 1.22.3, there is an integer underflow and resultant out-of-bounds read if an application calls gss_accep…
• CVE-2026-40355高 7.5In MIT Kerberos 5 (aka krb5) before 1.22.3, there is a NULL pointer dereference if an application calls gss_accept_sec_context() on a system…
• CVE-2024-37371緊急 9.1In MIT Kerberos 5 (aka krb5) before 1.21.3, an attacker can cause invalid memory reads during GSS message token handling by sending message …
• CVE-2024-37370高 7.5In MIT Kerberos 5 (aka krb5) before 1.21.3, an attacker can modify the plaintext Extra Count field of a confidential GSS krb5 wrap token, ca…
• CVE-2024-26462中 5.5Kerberos 5 (aka krb5) 1.21.2 contains a memory leak vulnerability in /krb5/src/kdc/ndr.c.