Lucene search
MitreCVELIST:CVE-2023-39975HistoryAug 16, 2023 - 12:00 a.m.
CVE-2023-39975
2023-08-1600:00:00
mitre
www.cve.org
mit kerberos
1.21.2
double free vulnerability
authorization-data handling failure
data copying
kdc/do_tgs_req.c in MIT Kerberos 5 (aka krb5) 1.21 before 1.21.2 has a double free that is reachable if an authenticated user can trigger an authorization-data handling failure. Incorrect data is copied from one ticket to another.
References
github.com/krb5/krb5/commit/88a1701b423c13991a8064feeb26952d3641d840
github.com/krb5/krb5/compare/krb5-1.21.1-final...krb5-1.21.2-final
security.netapp.com/advisory/ntap-20230915-0014/
security.netapp.com/advisory/ntap-20240201-0005/
security.netapp.com/advisory/ntap-20240201-0008/
web.mit.edu/kerberos/www/advisories/
Related
veracode
veracode
Double Free
2023-08-18 03:50:07
osv
osv
CVE-2023-39975
2023-08-16 15:15:11
Moderate: krb5 security and bug fix update
2023-11-07 00:00:00
debiancve
debiancve
CVE-2023-39975
2023-08-16 15:15:11
nessus
nessus
Fedora 38 : krb5 (2023-ca086f015c)
2023-08-10 00:00:00
CentOS 9 : krb5-1.21.1-1.el9
2024-02-29 00:00:00
prion
prion
Double free
2023-08-16 15:15:00
fedora
fedora
[SECURITY] Fedora 38 Update: krb5-1.21-3.fc38
2023-08-10 00:43:13
redhatcve
redhatcve
CVE-2023-39975
2023-08-22 17:50:39
freebsd
freebsd
krb5 -- Double-free in KDC TGS processing
2023-08-07 00:00:00
ibm
ibm
Security Bulletin: IBM Storage Ceph is vulnerable to Double Free in the RHEL UBI (CVE-2023-39975)
2024-01-19 22:37:59
Security Bulletin: IBM Security Guardium is affected by a multiple vulnerabilities (CVE-2023-39975, CVE-2023-34042)
2023-12-20 14:45:05
Security Bulletin: Multiple Vulnerabilities in CloudPak for AIOps
2023-12-18 18:02:34
nvd
nvd
CVE-2023-39975
2023-08-16 15:15:11
openvas
openvas
Fedora: Security Advisory for krb5 (FEDORA-2023-ca086f015c)
2023-08-10 00:00:00
ubuntucve
ubuntucve
CVE-2023-39975
2023-08-16 00:00:00
cve
cve
CVE-2023-39975
2023-08-16 15:15:11
f5
f5
K000138461 : MIT Kerberos 5 vulnerability CVE-2023-39975
2024-02-02 00:00:00
redhat
redhat
(RHSA-2023:6699) Moderate: krb5 security and bug fix update
2023-11-07 06:12:13
almalinux
almalinux
Moderate: krb5 security and bug fix update
2023-11-07 00:00:00
oraclelinux
oraclelinux
krb5 security and bug fix update
2023-11-11 00:00:00
gentoo
gentoo
MIT krb5: Multiple Vulnerabilities
2024-05-05 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - January 2024
2024-01-16 00:00:00
Oracle Critical Patch Update Advisory - April 2024
2024-04-16 00:00:00