Deserialization of Untrusted Data

Overview azure-ai-language-conversations-authoring is a Microsoft Corporation Azure Ai Language Conversations Authoring Client Library for Python Affected versions of this package are vulnerable to Deserialization of Untrusted Data in the getcontinuationtoken function. An attacker can execute...

SUSE CVE-2014-4344

The accctxcont function in the SPNEGO acceptor in lib/gssapi/spnego/spnegomech.c in MIT Kerberos 5 aka krb5 1.5.x through 1.12.x before 1.12.2 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via an empty continuation token at a certain point...

PT-2014-1774

Name of the Vulnerable Software and Affected Versions MIT Kerberos 5 aka krb5 versions 1.5.x through 1.12.x before 1.12.2 Description The issue allows remote attackers to cause a denial of service, resulting in a NULL pointer dereference and application crash, via an empty continuation token duri...