2 matches found
SUSE CVE-2009-0845
The spnegogssacceptseccontext function in lib/gssapi/spnego/spnegomech.c in MIT Kerberos 5 aka krb5 1.5 through 1.6.3, when SPNEGO is used, allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via invalid ContextFlags data in the reqFlags field in a...
5CVSS6.8AI score0.05628EPSS
SaveExploits2References5
krb5: NULL pointer dereference in GSSAPI SPNEGO (MITKRB5-SA-2009-001)
The spnegogssacceptseccontext function in lib/gssapi/spnego/spnegomech.c in MIT Kerberos 5 aka krb5 1.5 through 1.6.3, when SPNEGO is used, allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via invalid ContextFlags data in the reqFlags field in a...
5CVSS7.2AI score0.05628EPSS
SaveExploits2References4
20