5 matches found
CLSA-2024-1720178212 krb5: Fix of CVE-2023-36054
CVE-2023-36054: fix uninitialized pointer in kadmrpcxdr.c to prevent kadmind crash...
krb5: Denial of service through freeing uninitialized pointer
A vulnerability was found in the xdrkadm5principalentrec function in lib/kadm5/kadmrpcxdr.c in MIT Kerberos 5 krb5. This issue occurs due to lack of validation in the relationship between nkeydata and the keydata array count, leading to the freeing of uninitialized pointers. This may allow a remo...
ALPINE-CVE-2023-36054
lib/kadm5/kadmrpcxdr.c in MIT Kerberos 5 aka krb5 before 1.20.2 and 1.21.x before 1.21.1 frees an uninitialized pointer. A remote authenticated user can trigger a kadmind crash. This occurs because xdrkadm5principalentrec does not validate the relationship between nkeydata and the keydata array...
PT-2023-8967
Name of the Vulnerable Software and Affected Versions MIT Kerberos 5 aka krb5 versions 1.20.2 and earlier, 1.21.x versions prior to 1.21.1 Description The issue is related to the lib/kadm5/kadm rpc xdr.c file in the Kerberos implementation, where an uninitialized pointer is freed. This can be...