CVE-2017-17439

In Heimdal through 7.4, remote unauthenticated attackers are able to crash the KDC by sending a crafted UDP packet containing empty data fields for client name or realm. The parser would unconditionally dereference NULL pointers in that case, leading to a segmentation fault. This is related to th...

CVE-2017-17439: NULL Pointer Dereference

In Heimdal through 7.4, remote unauthenticated attackers are able to crash the KDC by sending a crafted UDP packet containing empty data fields for client name or realm. The parser would unconditionally dereference NULL pointers in that case, leading to a segmentation fault. This is related to th...

PT-2017-14780

Name of the Vulnerable Software and Affected Versions Heimdal versions prior to 7.5 Description The issue allows remote unauthenticated attackers to crash the KDC by sending a crafted UDP packet with empty data fields for client name or realm. This leads to a segmentation fault due to the parser...