Lucene search
+L

2 matches found

Mageia
Mageia
added 2018/03/01 9:27 p.m.54 views

Updated krb5 packages fix security vulnerabilities

Updated krb5 packages fix security vulnerabilities: An issue was discovered in MIT Kerberos 5 aka krb5 through 1.16. The pre-defined function "strlen" is getting a "NULL" string as a parameter value in plugins/kdb/ldap/libkdbldap/ldapprincipal2.c in the Key Distribution Center KDC, which allows...

6.5CVSS4.3AI score0.026EPSS
SaveExploits0References2
CVE
CVE
added 2018/01/16 9:0 a.m.119 views

CVE-2018-5710

MIT Kerberos 5 (krb5) up to 1.16 is affected by CVE-2018-5710 (along with CVE-2018-5729, CVE-2018-5730). The issue is in KDC’s plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c where a NULL string is passed to strlen, enabling a remote authenticated user to cause a denial of service via a modified k...

6.5CVSS5.1AI score0.01795EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder