Lucene search
GoogleOSV:CVE-2023-39975HistoryAug 16, 2023 - 3:15 p.m.
CVE-2023-39975
2023-08-1615:15:11
Google
osv.dev
11
mit kerberos
double free
vulnerability
authentication
authorization-data
software
kdc/do_tgs_req.c in MIT Kerberos 5 (aka krb5) 1.21 before 1.21.2 has a double free that is reachable if an authenticated user can trigger an authorization-data handling failure. Incorrect data is copied from one ticket to another.
References
github.com/krb5/krb5/commit/88a1701b423c13991a8064feeb26952d3641d840
github.com/krb5/krb5/compare/krb5-1.21.1-final...krb5-1.21.2-final
security.netapp.com/advisory/ntap-20230915-0014/
security.netapp.com/advisory/ntap-20240201-0005/
security.netapp.com/advisory/ntap-20240201-0008/
web.mit.edu/kerberos/www/advisories/
Related
debiancve
debiancve
CVE-2023-39975
2023-08-16 15:15:11
nessus
nessus
Fedora 38 : krb5 (2023-ca086f015c)
2023-08-10 00:00:00
CentOS 9 : krb5-1.21.1-1.el9
2024-02-29 00:00:00
cvelist
cvelist
CVE-2023-39975
2023-08-16 00:00:00
prion
prion
Double free
2023-08-16 15:15:00
fedora
fedora
[SECURITY] Fedora 38 Update: krb5-1.21-3.fc38
2023-08-10 00:43:13
ibm
ibm
Security Bulletin: IBM Storage Ceph is vulnerable to Double Free in the RHEL UBI (CVE-2023-39975)
2024-01-19 22:37:59
Security Bulletin: IBM Security Guardium is affected by a multiple vulnerabilities (CVE-2023-39975, CVE-2023-34042)
2023-12-20 14:45:05
Security Bulletin: Multiple Vulnerabilities in CloudPak for AIOps
2023-12-18 18:02:34
freebsd
freebsd
krb5 -- Double-free in KDC TGS processing
2023-08-07 00:00:00
redhatcve
redhatcve
CVE-2023-39975
2023-08-22 17:50:39
openvas
openvas
Fedora: Security Advisory for krb5 (FEDORA-2023-ca086f015c)
2023-08-10 00:00:00
ubuntucve
ubuntucve
CVE-2023-39975
2023-08-16 00:00:00
f5
f5
K000138461 : MIT Kerberos 5 vulnerability CVE-2023-39975
2024-02-02 00:00:00
cve
cve
CVE-2023-39975
2023-08-16 15:15:11
veracode
veracode
Double Free
2023-08-18 03:50:07
redhat
redhat
(RHSA-2023:6699) Moderate: krb5 security and bug fix update
2023-11-07 06:12:13
(RHSA-2024:0853) Moderate: Network Observability 1.5.0 for OpenShift
2024-02-21 13:29:48
almalinux
almalinux
Moderate: krb5 security and bug fix update
2023-11-07 00:00:00
osv
osv
Moderate: krb5 security and bug fix update
2023-11-07 00:00:00
oraclelinux
oraclelinux
krb5 security and bug fix update
2023-11-11 00:00:00
gentoo
gentoo
MIT krb5: Multiple Vulnerabilities
2024-05-05 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - January 2024
2024-01-16 00:00:00
Oracle Critical Patch Update Advisory - April 2024
2024-04-16 00:00:00