33 matches found
CVE-2026-112319
The GSS-RPC layer in MIT Kerberos 5 aka krb5 does not enforce size limits on XDR-decoded data, which allows remote authenticated users to cause a denial of service memory exhaustion or excessive CPU consumption in kadmind via crafted RPC requests that trigger unbounded memory allocations during X...
UBUNTU-CVE-2026-112319
The GSS-RPC layer in MIT Kerberos 5 aka krb5 does not enforce size limits on XDR-decoded data, which allows remote authenticated users to cause a denial of service memory exhaustion or excessive CPU consumption in kadmind via crafted RPC requests that trigger unbounded memory allocations during X...
CVE-2026-112319
The GSS-RPC layer in MIT Kerberos 5 aka krb5 does not enforce size limits on XDR-decoded data, which allows remote authenticated users to cause a denial of service memory exhaustion or excessive CPU consumption in kadmind via crafted RPC requests that trigger unbounded memory allocations during X...
CVE-2026-112319
The GSS-RPC layer in MIT Kerberos 5 aka krb5 does not enforce size limits on XDR-decoded data, which allows remote authenticated users to cause a denial of service memory exhaustion or excessive CPU consumption in kadmind via crafted RPC requests that trigger unbounded memory allocations during X...
DEBIAN-CVE-2026-112319
The GSS-RPC layer in MIT Kerberos 5 aka krb5 does not enforce size limits on XDR-decoded data, which allows remote authenticated users to cause a denial of service memory exhaustion or excessive CPU consumption in kadmind via crafted RPC requests that trigger unbounded memory allocations during X...
ALPINE-CVE-2026-112319
The GSS-RPC layer in MIT Kerberos 5 aka krb5 does not enforce size limits on XDR-decoded data, which allows remote authenticated users to cause a denial of service memory exhaustion or excessive CPU consumption in kadmind via crafted RPC requests that trigger unbounded memory allocations during X...
CVE-2026-112319
The GSS-RPC layer in MIT Kerberos 5 aka krb5 does not enforce size limits on XDR-decoded data, which allows remote authenticated users to cause a denial of service memory exhaustion or excessive CPU consumption in kadmind via crafted RPC requests that trigger unbounded memory allocations during X...
CVE-2026-112319
The GSS-RPC layer in MIT Kerberos 5 (krb5) fails to enforce size limits on XDR-decoded data . This flaw allows remote authenticated users to trigger unbounded memory allocations via crafted RPC requests, leading to a denial of service through memory exhaustion or excessive CPU consumption in kadm...
CVE-2026-112319
The GSS-RPC layer in MIT Kerberos 5 aka krb5 does not enforce size limits on XDR-decoded data, which allows remote authenticated users to cause a denial of service memory exhaustion or excessive CPU consumption in kadmind via crafted RPC requests that trigger unbounded memory allocations during X...
EUVD-2026-120235
The GSS-RPC layer in MIT Kerberos 5 aka krb5 does not enforce size limits on XDR-decoded data, which allows remote authenticated users to cause a denial of service memory exhaustion or excessive CPU consumption in kadmind via crafted RPC requests that trigger unbounded memory allocations during X...
CVE-2026-112319: Red Hat: The GSS-RPC layer in MIT Kerberos 5 (aka krb5) does not enforce size limits on XDR-decoded data, which allows remote…
The GSS-RPC layer in MIT Kerberos 5 aka krb5 does not enforce size limits on XDR-decoded data, which allows remote authenticated users to cause a denial of service memory exhaustion or excessive CPU consumption in kadmind via crafted RPC requests that trigger unbounded memory allocations during X...
PT-2026-140974
The GSS-RPC layer in MIT Kerberos 5 aka krb5 does not enforce size limits on XDR-decoded data, which allows remote authenticated users to cause a denial of service memory exhaustion or excessive CPU consumption in kadmind via crafted RPC requests that trigger unbounded memory allocations during X...
Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100189)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100189 advisory. In the Linux kernel, the following vulnerability has been resolved: SUNRPC: authgss: fix memory leaks in XDR decoding error paths The gssxdecctx, gssxdecstatus, and...
SUSE CVE-2026-45870
In the Linux kernel, the following vulnerability has been resolved: SUNRPC: authgss: fix memory leaks in XDR decoding error paths The gssxdecctx, gssxdecstatus, and gssxdecname functions allocate memory via gssxdecbuffer, which calls kmemdup. When a subsequent decode operation fails, these...
CVE-2026-45870
A flaw was found in the Linux kernel's SUNRPC Sun Remote Procedure Call authentication GSS Generic Security Service module. This vulnerability occurs due to memory leaks in the XDR eXternal Data Representation decoding error paths within functions like gssxdecctx, gssxdecstatus, and gssxdecname...
EUVD-2026-32336
In the Linux kernel, the following vulnerability has been resolved: SUNRPC: authgss: fix memory leaks in XDR decoding error paths The gssxdecctx, gssxdecstatus, and gssxdecname functions allocate memory via gssxdecbuffer, which calls kmemdup. When a subsequent decode operation fails, these...
UBUNTU-CVE-2026-45870
In the Linux kernel, the following vulnerability has been resolved: SUNRPC: authgss: fix memory leaks in XDR decoding error paths The gssxdecctx, gssxdecstatus, and gssxdecname functions allocate memory via gssxdecbuffer, which calls kmemdup. When a subsequent decode operation fails, these...
CVE-2026-45870
In the Linux kernel, the following vulnerability has been resolved: SUNRPC: authgss: fix memory leaks in XDR decoding error paths The gssxdecctx, gssxdecstatus, and gssxdecname functions allocate memory via gssxdecbuffer, which calls kmemdup. When a subsequent decode operation fails, these...
CVE-2026-45870
CVE-2026-45870 affects the Linux kernel’s SUNRPC auth_gss path. The issue is memory leaks in XDR decoding error paths caused by gssx_dec_ctx(), gssx_dec_status(), and gssx_dec_name() allocating buffers via gssx_dec_buffer()/kmemdup() and returning on error without freeing previously allocated mem...
CVE-2026-45870 SUNRPC: auth_gss: fix memory leaks in XDR decoding error paths
In the Linux kernel, the following vulnerability has been resolved: SUNRPC: authgss: fix memory leaks in XDR decoding error paths The gssxdecctx, gssxdecstatus, and gssxdecname functions allocate memory via gssxdecbuffer, which calls kmemdup. When a subsequent decode operation fails, these...