F5F5:K000138461

HistoryFeb 02, 2024 - 12:00 a.m.

K000138461 : MIT Kerberos 5 vulnerability CVE-2023-39975

2024-02-0200:00:00

my.f5.com

mit kerberos 5

double free vulnerability

kdc/do_tgs_req.c

6.4 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

41.4%

JSON

Security Advisory Description

kdc/do_tgs_req.c in MIT Kerberos 5 (aka krb5) 1.21 before 1.21.2 has a double free that is reachable if an authenticated user can trigger an authorization-data handling failure. Incorrect data is copied from one ticket to another. (CVE-2023-39975)

Impact

There is no impact; F5 products are not affected by this vulnerability.

CPENameOperatorVersion
f5 ssl orchestratoreq15.1.0
f5 ssl orchestratoreq15.1.1
f5 ssl orchestratoreq15.1.9
f5 ssl orchestratoreq16.1.0
f5 ssl orchestratoreq16.1.1
f5 ssl orchestratoreq16.1.3
f5 ssl orchestratoreq16.1.4
f5 ssl orchestratoreq17.1.0
f5 ssl orchestratoreq17.1.1
big-ip next cgnat cnfeq1.1.0

Name	Operator	Version
f5 ssl orchestrator	eq	15.1.0
f5 ssl orchestrator	eq	15.1.1
f5 ssl orchestrator	eq	15.1.9
f5 ssl orchestrator	eq	16.1.0
f5 ssl orchestrator	eq	16.1.1
f5 ssl orchestrator	eq	16.1.3
f5 ssl orchestrator	eq	16.1.4
f5 ssl orchestrator	eq	17.1.0
f5 ssl orchestrator	eq	17.1.1
big-ip next cgnat cnf	eq	1.1.0

Rows per page:

1-10 of 3971

K000138461 : MIT Kerberos 5 vulnerability CVE-2023-39975

Related