CVE-2024-37371

2024-06-2823:15:11

Alpine Linux Development Team

security.alpinelinux.org

cve-2024-37371

memory reads

gss message token

invalid length

unix

7.3 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.2%

JSON

In MIT Kerberos 5 (aka krb5) before 1.21.3, an attacker can cause invalid memory reads during GSS message token handling by sending message tokens with invalid length fields.

OSVersionArchitecturePackageVersionFilename
Alpineedge-mainnoarchkrb5< 1.20.3-r0UNKNOWN
Alpine3.19-mainnoarchkrb5< 1.20.3-r0UNKNOWN
Alpine3.20-mainnoarchkrb5< 1.20.3-r0UNKNOWN