105 matches found
CVE-2025-47981
🔵 CVE-2025-47981 — Скрипт оценки уязвимости Windows SPNEGO NEGOEX Тип: Оценка уязвимости — Обнаружение / Проверка соответствия CVE: CVE-2025-47981 CVSS: 9.8 Critical AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CWE: CWE-122 — Переполнение буфера в куче Псевдоним: "SPNEGO Nightmare" / "Windows Authenticati...
Astra Linux – Vulnerability in krb5
In MIT Kerberos 5 also known as krb5, prior to version 1.22.3, there was a NULL pointer dereferencing issue when an application called gssacceptseccontext on a system where the NegoEx mechanism was registered in /etc/gss/mech. An unauthenticated remote attacker could trigger this issue, causing t...
NegoExRelay
Negoexrelayx - инструмент ретрансляции NegoEx Инструментарий для эксплуатации Kerberos PKU2U и NegoEx. Требуется impacket Рекомендуется устанавливать impacket напрямую из git, чтобы иметь последнюю доступную версию. negoexrelayx.py Этот инструмент позволяет ретранслировать аутентификацию NegoEx с...
EulerOS Virtualization 2.13.0 : krb5 (EulerOS-SA-2026-3217)
According to the versions of the krb5 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : In MIT Kerberos 5 aka krb5 before 1.22.3, there is a NULL pointer dereference if an application calls gssacceptseccontext on a system...
EulerOS Virtualization 2.13.1 : krb5 (EulerOS-SA-2026-3177)
According to the versions of the krb5 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : In MIT Kerberos 5 aka krb5 before 1.22.3, there is a NULL pointer dereference if an application calls gssacceptseccontext on a system...
Astra Linux – Vulnerability in krb5
In MIT Kerberos 5 also known as krb5, prior to version 1.22.3, there was an integer underflow issue, which could lead to out-of-bounds reads if an application called gssacceptseccontext on a system where the NegoEx mechanism was registered in /etc/gss/mech. An unauthenticated remote attacker coul...
JLSEC-2026-1258 In MIT Kerberos 5 (aka krb5) before 1.22.3, there is a NULL pointer dereference if an application...
In MIT Kerberos 5 aka krb5 before 1.22.3, there is a NULL pointer dereference if an application calls gssacceptseccontext on a system with a NegoEx mechanism registered in /etc/gss/mech. An unauthenticated remote attacker can trigger this, causing the process to terminate in parsenegomessage...
JLSEC-2026-1259 In MIT Kerberos 5 (aka krb5) before 1.22.3, there is an integer underflow and resultant out-of...
In MIT Kerberos 5 aka krb5 before 1.22.3, there is an integer underflow and resultant out-of-bounds read if an application calls gssacceptseccontext on a system with a NegoEx mechanism registered in /etc/gss/mech. An unauthenticated remote attacker can trigger this, possibly causing the process t...
EulerOS 2.0 SP11 : krb5 (EulerOS-SA-2026-3072)
According to the versions of the krb5 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : In MIT Kerberos 5 aka krb5 before 1.22.3, there is a NULL pointer dereference if an application calls gssacceptseccontext on a system with a NegoEx...
EulerOS 2.0 SP11 : krb5 (EulerOS-SA-2026-3127)
According to the versions of the krb5 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : In MIT Kerberos 5 aka krb5 before 1.22.3, there is a NULL pointer dereference if an application calls gssacceptseccontext on a system with a NegoEx...
EulerOS 2.0 SP15 : krb5 (EulerOS-SA-2026-2890)
According to the versions of the krb5 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : In MIT Kerberos 5 aka krb5 before 1.22.3, there is an integer underflow and resultant out-of-bounds read if an application calls gssacceptseccontext...
EulerOS 2.0 SP15 : krb5 (EulerOS-SA-2026-2931)
According to the versions of the krb5 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : In MIT Kerberos 5 aka krb5 before 1.22.3, there is an integer underflow and resultant out-of-bounds read if an application calls gssacceptseccontext...
EulerOS 2.0 SP13 : krb5 (EulerOS-SA-2026-2972)
According to the versions of the krb5 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : In MIT Kerberos 5 aka krb5 before 1.22.3, there is a NULL pointer dereference if an application calls gssacceptseccontext on a system with a NegoEx...
EulerOS 2.0 SP13 : krb5 (EulerOS-SA-2026-3022)
According to the versions of the krb5 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : In MIT Kerberos 5 aka krb5 before 1.22.3, there is a NULL pointer dereference if an application calls gssacceptseccontext on a system with a NegoEx...
USN-8585-1: Kerberos vulnerabilities
It was discovered that Kerberos had an integer underflow vulnerability in the berval2tldata function. An attacker could possibly use this issue to cause Kerberos to crash, resulting in a denial of service. CVE-2026-11850 It was discovered that Kerberos had vulnerabilities in its NegoEx mechanism...
USN-8585-1 krb5 vulnerabilities
It was discovered that Kerberos had an integer underflow vulnerability in the berval2tldata function. An attacker could possibly use this issue to cause Kerberos to crash, resulting in a denial of service. CVE-2026-11850 It was discovered that Kerberos had vulnerabilities in its NegoEx mechanism...
EulerOS Virtualization 2.12.1 (EulerOS-SA-2026-2731)
According to the versions of the packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : In MIT Kerberos 5 aka krb5 before 1.22.3, there is a NULL pointer dereference if an application calls gssacceptseccontext on a system with...
Oracle Linux 10 : krb5 (ELSA-2026-19145)
The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-19145 advisory. 1.21.3-10.0.1 - Fixed race condition in krb5setpassword Orabug: 33609767 1.21.3-10 - Fix NegoEx parsing vulnerabilities CVE-2026-40355, CVE-2026-4035...
krb5 security update
1.21.3-10.0.1 - Fixed race condition in krb5setpassword Orabug: 33609767 1.21.3-10 - Fix NegoEx parsing vulnerabilities CVE-2026-40355, CVE-2026-40356 Resolves: RHEL-171588 RHEL-171597...
EulerOS 2.0 SP12 : krb5 (EulerOS-SA-2026-2596)
According to the versions of the krb5 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : In MIT Kerberos 5 aka krb5 before 1.22.3, there is a NULL pointer dereference if an application calls gssacceptseccontext on a system with a NegoEx...