GNU Recutils Null Pointer Dereference Vulnerability (CNVD-2019-22424)

GNU Recutils is a set of tools and libraries for accessing human-editable plain text databases called recfiles. A null pointer dereference vulnerability exists in the recfieldsetname function in rec-field.c in librec.a in GNU Recutils 1.8. No details of the vulnerability are provided at this time...

krb5: Memory leak caused by supplying a null principal name in request

A memory leak flaw was found in the krb5unparsename function of the MIT Kerberos kadmind service. An authenticated attacker could repeatedly send specially crafted requests to the server, which could cause the server to consume large amounts of memory resources, ultimately leading to a denial of...