Azure Linux 3.0 Security Update: krb5 (CVE-2024-26458)

The version of krb5 installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-26458 advisory. - Kerberos 5 aka krb5 1.21.2 contains a memory leak in /krb5/src/lib/rpc/pmaprmt.c. CVE-2024-26458 Note that...

MiracleLinux 9 : postgresql-13.10-1.el9 (AXSA:2023-5280:02)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2023-5280:02 advisory. postgresql: Extension scripts replace objects not belonging to the extension. CVE-2022-2625 postgresql: Client memory disclosure when connecting wit...

TencentOS Server 4: krb5 (TSSA-2024:0617)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2024:0617 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...

Linux Distros Unpatched Vulnerability : CVE-2024-26461

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Kerberos 5 aka krb5 1.21.2 contains a memory leak vulnerability in /krb5/src/lib/gssapi/krb5/k5sealv3.c. CVE-2024-26461 Note that Nessus relies on the presence ...

USN-7314-1 krb5 vulnerabilities

It was discovered that Kerberos incorrectly handled certain memory operations. A remote attacker could possibly use this issue to cause Kerberos to consume memory,leading to a denial of service. CVE-2024-26458, CVE-2024-26461 It was discovered that Kerberos incorrectly handled certain memory...

CLSA-2024-1733141074 krb5: Fix of 2 CVEs

CVE-2024-26458: Fix memory leak vulnerability in src/lib/rpc/pmaprmt.c - CVE-2024-26461: Fix memory leak vulnerability in src/lib/gssapi/krb5/k5sealv3.c...

krb5: Memory leak at /krb5/src/lib/gssapi/krb5/k5sealv3.c

A memory leak flaw was found in krb5 in /krb5/src/lib/gssapi/krb5/k5sealv3.c. This issue can lead to a denial of service through memory exhaustion...

CLSA-2024-1718289068 krb5: Fix of 2 CVEs

CVE-2024-26461: fix possible memory leak in /krb5/src/lib/gssapi/krb5/k5sealv3.c - CVE-2024-26458: fix possible memory leak in /krb5/src/lib/rpc/pmaprmt.c...

krb5: Memory leak at /krb5/src/lib/rpc/pmap_rmt.c

A memory leak flaw was found in krb5 in /krb5/src/lib/rpc/pmaprmt.c. This issue can lead to a denial of service through memory exhaustion...

DEBIAN-CVE-2024-26461

Kerberos 5 aka krb5 1.21.2 contains a memory leak vulnerability in /krb5/src/lib/gssapi/krb5/k5sealv3.c...

AZL-35454 CVE-2024-26461 affecting package krb5 for versions less than 1.19.4-3

Kerberos 5 aka krb5 1.21.2 contains a memory leak vulnerability in /krb5/src/lib/gssapi/krb5/k5sealv3.c...

AZL-35481 CVE-2024-26461 affecting package krb5 for versions less than 1.21.3-1

Kerberos 5 aka krb5 1.21.2 contains a memory leak vulnerability in /krb5/src/lib/gssapi/krb5/k5sealv3.c...

AZL-35455 CVE-2024-26458 affecting package krb5 for versions less than 1.19.4-3

Kerberos 5 aka krb5 1.21.2 contains a memory leak in /krb5/src/lib/rpc/pmaprmt.c...

UBUNTU-CVE-2024-26462

Kerberos 5 aka krb5 1.21.2 contains a memory leak vulnerability in /krb5/src/kdc/ndr.c...

UBUNTU-CVE-2024-26458

Kerberos 5 aka krb5 1.21.2 contains a memory leak in /krb5/src/lib/rpc/pmaprmt.c...

krb5: Memory leak caused by supplying a null principal name in request

A memory leak flaw was found in the krb5unparsename function of the MIT Kerberos kadmind service. An authenticated attacker could repeatedly send specially crafted requests to the server, which could cause the server to consume large amounts of memory resources, ultimately leading to a denial of...