The vulnerability of the get_mech_set() function in the spnego_mech.c component of the Kerberos authentication protocol allows a attacker to cause a service failure.

The vulnerability of the getmechset function in the spnegomech.c component of the Kerberos authentication protocol is related to reading data from within a permissible buffer size. Exploiting this vulnerability could allow an attacker to cause a service failure...