Lucene search
GoogleOSV:CVE-2018-20217HistoryDec 26, 2018 - 9:29 p.m.
CVE-2018-20217
2018-12-2621:29:02
Google
osv.dev
12
A Reachable Assertion issue was discovered in the KDC in MIT Kerberos 5 (aka krb5) before 1.17. If an attacker can obtain a krbtgt ticket using an older encryption type (single-DES, triple-DES, or RC4), the attacker can crash the KDC by making an S4U2Self request.
References
krbdev.mit.edu/rt/Ticket/Display.html?id=8763
github.com/krb5/krb5/commit/5e6d1796106df8ba6bc1973ee0917c170d929086
lists.debian.org/debian-lts-announce/2019/01/msg00020.html
lists.debian.org/debian-lts-announce/2021/09/msg00019.html
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2KNHELH4YHNT6H2ESJWX2UIDXLBNGB2O/
security.netapp.com/advisory/ntap-20190416-0006/
Related
openvas
openvas
Huawei EulerOS: Security Advisory for krb5 (EulerOS-SA-2019-2600)
2020-01-23 00:00:00
Huawei EulerOS: Security Advisory for krb5 (EulerOS-SA-2019-2378)
2020-01-23 00:00:00
openSUSE: Security Advisory for krb5 (openSUSE-SU-2019:0085-1)
2019-01-26 00:00:00
fedora
fedora
[SECURITY] Fedora 29 Update: krb5-1.16.1-22.fc29
2018-12-24 06:08:40
[SECURITY] Fedora 29 Update: krb5-1.16.1-24.fc29
2019-01-08 02:43:21
[SECURITY] Fedora 28 Update: krb5-1.16.1-24.fc28
2019-01-11 00:17:04
nessus
nessus
NewStart CGSL CORE 5.04 / MAIN 5.04 : krb5 Vulnerability (NS-SA-2020-0040)
2020-09-21 00:00:00
EulerOS 2.0 SP3 : krb5 (EulerOS-SA-2019-2600)
2019-12-18 00:00:00
SUSE SLES12 Security Update : krb5 (SUSE-SU-2019:0113-1)
2019-01-18 00:00:00
prion
prion
Design/Logic Flaw
2018-12-26 21:29:00
altlinux
altlinux
Security fix for the ALT Linux 9 package krb5 version 1.16.3-alt1
2019-01-08 00:00:00
suse
suse
Security update for krb5 (important)
2019-01-18 00:00:00
Security update for krb5 (important)
2019-01-25 00:00:00
nvd
nvd
CVE-2018-20217
2018-12-26 21:29:02
mageia
mageia
Updated krb5 packages fix security vulnerability
2019-01-10 13:53:49
cve
cve
CVE-2018-20217
2018-12-26 21:29:02
amazon
amazon
Medium: krb5
2020-05-22 20:58:00
alpinelinux
alpinelinux
CVE-2018-20217
2018-12-26 21:29:02
ubuntucve
ubuntucve
CVE-2018-20217
2018-12-26 00:00:00
debiancve
debiancve
CVE-2018-20217
2018-12-26 21:29:02
redhatcve
redhatcve
CVE-2018-20217
2019-01-10 21:50:36
cvelist
cvelist
CVE-2018-20217
2018-12-26 20:00:00
cloudfoundry
cloudfoundry
USN-5828-1: Kerberos vulnerabilities | Cloud Foundry
2023-02-24 00:00:00
osv
osv
krb5 vulnerabilities
2023-01-25 20:14:24
krb5-1.19.2-3.1 on GA media
2024-06-15 00:00:00
krb5 - security update
2019-01-25 00:00:00
ubuntu
ubuntu
Kerberos vulnerabilities
2023-01-25 00:00:00
debian
debian
[SECURITY] [DLA 1643-1] krb5 security update
2019-01-25 22:46:23
[SECURITY] [DLA 2771-1] krb5 security update
2021-09-30 20:08:58
photon
photon
Moderate Photon OS Security Update - PHSA-2019-0020
2019-06-17 00:00:00
Moderate Photon OS Security Update - PHSA-2019-3.0-0020
2019-06-17 00:00:00
ibm
ibm
avleonov
avleonov