CVE-2021-36222

概要

参考情報

• krb5/krb5 commit fc98f52 · Patch
• krb5/krb5 release · Release Notes
• security.netapp.com/advisory/ntap-20211022-0003 · Third Party Advisory
• security.netapp.com/advisory/ntap-20211104-0007 · Third Party Advisory
• web.mit.edu/kerberos/advisories · Not Applicable
• debian.org/security/2021/dsa-4944 · Third Party Advisory
• oracle.com/security-alerts/cpuoct2021.html · Patch
• cert-portal.siemens.com/productcert/html/ssa-398330.html

kerberos 5 のその他の脆弱性

• CVE-2026-40356高 7.5In MIT Kerberos 5 (aka krb5) before 1.22.3, there is an integer underflow and resultant out-of-bounds read if an application calls gss_accep…
• CVE-2026-40355高 7.5In MIT Kerberos 5 (aka krb5) before 1.22.3, there is a NULL pointer dereference if an application calls gss_accept_sec_context() on a system…
• CVE-2024-37371緊急 9.1In MIT Kerberos 5 (aka krb5) before 1.21.3, an attacker can cause invalid memory reads during GSS message token handling by sending message …
• CVE-2024-37370高 7.5In MIT Kerberos 5 (aka krb5) before 1.21.3, an attacker can modify the plaintext Extra Count field of a confidential GSS krb5 wrap token, ca…
• CVE-2024-26462中 5.5Kerberos 5 (aka krb5) 1.21.2 contains a memory leak vulnerability in /krb5/src/kdc/ndr.c.