krb5: multi-realm KDC null dereference leads to crash

It was found that if a KDC served multiple realms, certain requests could cause the setupserverrealm function to dereference a NULL pointer. A remote, unauthenticated attacker could use this flaw to crash the KDC using a specially crafted request...

Mandriva Linux Security Advisory : krb5 (MDVSA-2014:165)

Updated krb5 package fixes security vulnerabilities : MIT Kerberos 5 allows attackers to cause a denial of service via a buffer over-read or NULL pointer dereference, by injecting invalid tokens into a GSSAPI application session CVE-2014-4341, CVE-2014-4342. MIT Kerberos 5 allows attackers to cau...

Updated krb5 package fixes security vulnerabilities

MIT Kerberos 5 allows attackers to cause a denial of service via a buffer over-read or NULL pointer dereference, by injecting invalid tokens into a GSSAPI application session CVE-2014-4341, CVE-2014-4342. MIT Kerberos 5 allows attackers to cause a denial of service via a double-free flaw or NULL...

Debian DSA-3000-1 : krb5 - security update

Several vulnerabilities were discovered in krb5, the MIT implementation of Kerberos. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2014-4341 An unauthenticated remote attacker with the ability to inject packets into a legitimately established GSSAPI...

Kerberos 4 4.0/5 5.0 KDC Spoofing Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/1616/info Kerberos is a cryptographic authentication protocol that allows users of a network to access services without transmitting cleartext passwords. A common implementation of the protocol includes a login service...

openSUSE Security Update : krb5 (openSUSE-SU-2013:1738-1)

This update fixes the following security issue with krb5 : - bnc849240, CVE-2013-1418: fix Multi-realm KDC null deref %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2013-880. The tex...

openSUSE Security Update : krb5 (openSUSE-SU-2011:0111-1)

Multiple KDC DoS vulnerabilities if used with LDAP backends have been fixed in krb5. CVE-2011-0281 and CVE-2011-0282 have been assigned. Additionally a DoS vulnerability in kpropd has been fixed. CVE-2010-4022 has been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. T...

openSUSE Security Update : krb5 (krb5-4163)

A double-free issue in kdc when PKINIT is enabled allowed remote attackers to crash the daemon or potentially execute arbitrary code CVE-2011-0284. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security...

openSUSE Security Update : krb5 (openSUSE-SU-2010:0709-1)

remote authenticated clients could crash the kdc CVE-2010-1322. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update krb5-3259. The text description of this plugin is C SUSE LLC...

openSUSE Security Update : krb5 (openSUSE-2011-58)

fix KDC NULL pointer dereference in TGS handling MITKRB5-SA-2011-007, bnc730393 CVE-2011-1530 - fix KDC HA feature introduced with implementing KDC poll RT6951 - fix minor error messages for the IAKERB GSSAPI mechanism see: http://krbdev.mit.edu/rt/Ticket/Display.html?id=7020 - fix KDC NULL...

Kerberos Cross-Realm Referrals KDC NULL Pointer Dereference Denial of Service (CVE-2013-1417)

A denial of service vulnerability has been reported in Kerberos. The vulnerability is due to a NULL pointer dereference within the "processtgsreq" function. A remote attacker can exploit this vulnerability by sending a specially crafted request to a KDC serving a realm...

CVE-2013-5359

Stack-based buffer overflow in Picasa3.exe in Google Picasa before 3.9.0 Build 137.69 might allow remote attackers to execute arbitrary code via a crafted RAW file, as demonstrated using a KDC file with a certain size...

CVE-2013-5358

Picasa3.exe in Google Picasa before 3.9.0 Build 137.69 allows remote attackers to trigger memory corruption via a crafted TIFF tag, as demonstrated using a KDC file with a DSLR-A100 model and certain sequences of tags...

Stack overflow

Stack-based buffer overflow in Picasa3.exe in Google Picasa before 3.9.0 Build 137.69 might allow remote attackers to execute arbitrary code via a crafted RAW file, as demonstrated using a KDC file with a certain size...

Memory corruption

Picasa3.exe in Google Picasa before 3.9.0 Build 137.69 allows remote attackers to trigger memory corruption via a crafted TIFF tag, as demonstrated using a KDC file with a DSLR-A100 model and certain sequences of tags...

CVE-2013-5358

Picasa3.exe in Google Picasa before 3.9.0 Build 137.69 allows remote attackers to trigger memory corruption via a crafted TIFF tag, as demonstrated using a KDC file with a DSLR-A100 model and certain sequences of tags...

CVE-2013-5359

Stack-based buffer overflow in Picasa3.exe in Google Picasa before 3.9.0 Build 137.69 might allow remote attackers to execute arbitrary code via a crafted RAW file, as demonstrated using a KDC file with a certain size...

CVE-2013-5359

Affected software: Google Picasa. The CVE-2013-5359 issue is a stack-based buffer overflow in Picasa3.exe triggered by parsing a specially crafted KDC file (71 bytes), leading to arbitrary code execution. Public details confirm the vulnerability exists in Google Picasa before 3.9.0 Build 137.69, ...

SuSE 11.2 / 11.3 Security Update : krb5 (SAT Patch Numbers 8533 / 8534)

This update for krb5 fixes the following security issue : - If a KDC serves multiple realms, certain requests could cause setupserverrealm to dereference a NULL pointer, crashing the KDC. CVE-2013-1418 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in...

Fedora 19 : krb5-1.11.3-13.fc19 (2013-21786)

This update incorporates a fix for a bug which could cause clients which attempted to contact servers using TCP to become wedge. This update incorporates fixes for a possible remotely-triggered crash in KDCs which are configured to serve multiple realms at once CVE-2013-1418, and another which...