CVE-2014-5354

概要

参考情報

• lists.opensuse.org/opensuse-updates/2015-03/msg00061.html
• securityfocus.com/bid/71680
• securitytracker.com/id/1031376
• ubuntu.com/usn/USN-2498-1
• krb5/krb5 commit 04038bf

kerberos のその他の脆弱性

• CVE-2018-20217中 5.3A Reachable Assertion issue was discovered in the KDC in MIT Kerberos 5 (aka krb5) before 1.17. If an attacker can obtain a krbtgt ticket us…
• CVE-2018-5710中 6.5An issue was discovered in MIT Kerberos 5 (aka krb5) through 1.16. The pre-defined function "strlen" is getting a "NULL" string as a paramet…
• CVE-2018-5709高 7.5An issue was discovered in MIT Kerberos 5 (aka krb5) through 1.16. There is a variable "dbentry->n_key_data" in kadmin/dbutil/dump.c that ca…
• CVE-2017-11368中 6.5In MIT Kerberos 5 (aka krb5) 1.7 and later, an authenticated attacker can cause a KDC assertion failure by sending invalid S4U2Self or S4U2P…
• CVE-2014-4342中 5.0MIT Kerberos 5 (aka krb5) 1.7.x through 1.12.x before 1.12.2 allows remote attackers to cause a denial of service (buffer over-read or NULL …