CVE-2022-42898: Integer Overflow or Wraparound

PAC parsing in MIT Kerberos 5 aka krb5 before 1.19.4 and 1.20.x before 1.20.1 has integer overflows that may lead to remote code execution in KDC, kadmind, or a GSS or Kerberos application server on 32-bit platforms which have a resultant heap-based buffer overflow, and cause a denial of service ...

CVE-2022-42898

PAC parsing in MIT Kerberos 5 aka krb5 before 1.19.4 and 1.20.x before 1.20.1 has integer overflows that may lead to remote code execution in KDC, kadmind, or a GSS or Kerberos application server on 32-bit platforms which have a resultant heap-based buffer overflow, and cause a denial of service ...

CVE-2022-42898

PAC parsing in MIT Kerberos 5 aka krb5 before 1.19.4 and 1.20.x before 1.20.1 has integer overflows that may lead to remote code execution in KDC, kadmind, or a GSS or Kerberos application server on 32-bit platforms which have a resultant heap-based buffer overflow, and cause a denial of service ...

krb5:Fuzz_pac: Use-after-poison in krb5_pac_parse

Detailed Report: https://oss-fuzz.com/testcase?key=5667867483308032 Project: krb5 Fuzzing Engine: honggfuzz Fuzz Target: Fuzzpac Job Type: honggfuzzasankrb5 Platform Id: linux Crash Type: Use-after-poison READ 8 Crash Address: 0x7fffe33e5017 Crash State: krb5pacparse Fuzzpac.c Sanitizer: address...

krb5:Fuzz_pac: Use-after-poison in krb5_pac_parse

Project: https://github.com/krb5/krb5.git Detailed Report: https://oss-fuzz.com/testcase?key=5701449295724544 Project: krb5 Fuzzing Engine: afl Fuzz Target: Fuzzpac Job Type: aflasankrb5 Platform Id: linux Crash Type: Use-after-poison READ 4 Crash Address: 0x7f398fefd00f Crash State: krb5pacparse...