CVE-2024-37371

Mô tả

Tham khảo

• krb5/krb5 commit 55fbf43 · Patch
• web.mit.edu/kerberos/www/advisories · Vendor Advisory
• security.netapp.com/advisory/ntap-20241108-0009
• security.netapp.com/advisory/ntap-20250124-0010
• cert-portal.siemens.com/productcert/html/ssa-082556.html

Lỗ hổng khác của kerberos 5

• CVE-2026-40356CAO 7.5In MIT Kerberos 5 (aka krb5) before 1.22.3, there is an integer underflow and resultant out-of-bounds read if an application calls gss_accep…
• CVE-2026-40355CAO 7.5In MIT Kerberos 5 (aka krb5) before 1.22.3, there is a NULL pointer dereference if an application calls gss_accept_sec_context() on a system…
• CVE-2024-37370CAO 7.5In MIT Kerberos 5 (aka krb5) before 1.21.3, an attacker can modify the plaintext Extra Count field of a confidential GSS krb5 wrap token, ca…
• CVE-2024-26462TRUNG BÌNH 5.5Kerberos 5 (aka krb5) 1.21.2 contains a memory leak vulnerability in /krb5/src/kdc/ndr.c.
• CVE-2024-26461CAO 7.5Kerberos 5 (aka krb5) 1.21.2 contains a memory leak vulnerability in /krb5/src/lib/gssapi/krb5/k5sealv3.c.