Lucene search
+L

672 matches found

Tenable Nessus
Tenable Nessus
added 2023/01/06 12:0 a.m.25 views

EulerOS 2.0 SP9 : samba (EulerOS-SA-2023-1112)

According to the versions of the samba packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - PAC parsing in MIT Kerberos 5 aka krb5 before 1.19.4 and 1.20.x before 1.20.1 has integer overflows that may lead to remote code execution in KDC...

8.8CVSS7.5AI score0.06419EPSS
Exploits1References2
Microsoft CVE
Microsoft CVE
added 2023/01/06 12:0 a.m.6 views

CVE-2022-42898

...

8.8CVSS6.5AI score0.06419EPSS
Exploits1
OpenVAS
OpenVAS
added 2023/01/03 12:0 a.m.22 views

MIT Kerberos5 < 1.19.4, 1.20.x < 1.20.1 Integer Overflow Vulnerability

MIT Kerberos5 is prone to an integer overflow vulnerability in PAC parsing. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

8.8CVSS9.3AI score0.06419EPSS
Exploits1References2
NVD
NVD
added 2022/12/25 6:15 a.m.16 views

CVE-2022-42898

PAC parsing in MIT Kerberos 5 aka krb5 before 1.19.4 and 1.20.x before 1.20.1 has integer overflows that may lead to remote code execution in KDC, kadmind, or a GSS or Kerberos application server on 32-bit platforms which have a resultant heap-based buffer overflow, and cause a denial of service ...

8.8CVSS0.06419EPSS
Exploits1References11
OSV
OSV
added 2022/12/25 6:15 a.m.8 views

AZL-12123 CVE-2022-42898 affecting package samba 4.12.5-7

PAC parsing in MIT Kerberos 5 aka krb5 before 1.19.4 and 1.20.x before 1.20.1 has integer overflows that may lead to remote code execution in KDC, kadmind, or a GSS or Kerberos application server on 32-bit platforms which have a resultant heap-based buffer overflow, and cause a denial of service ...

8.8CVSS7.4AI score0.06419EPSS
Exploits1References1
OSV
OSV
added 2022/12/25 6:15 a.m.6 views

AZL-12133 CVE-2022-42898 affecting package krb5 for versions less than 1.19.4-1

PAC parsing in MIT Kerberos 5 aka krb5 before 1.19.4 and 1.20.x before 1.20.1 has integer overflows that may lead to remote code execution in KDC, kadmind, or a GSS or Kerberos application server on 32-bit platforms which have a resultant heap-based buffer overflow, and cause a denial of service ...

8.8CVSS7.4AI score0.06419EPSS
Exploits1References1
OSV
OSV
added 2022/12/25 6:15 a.m.5 views

ALPINE-CVE-2022-42898

PAC parsing in MIT Kerberos 5 aka krb5 before 1.19.4 and 1.20.x before 1.20.1 has integer overflows that may lead to remote code execution in KDC, kadmind, or a GSS or Kerberos application server on 32-bit platforms which have a resultant heap-based buffer overflow, and cause a denial of service ...

8.8CVSS8.2AI score0.06419EPSS
Exploits1References1
OSV
OSV
added 2022/12/25 6:15 a.m.15 views

AZL-37017 CVE-2022-42898 affecting package samba for versions less than 4.18.3-1

PAC parsing in MIT Kerberos 5 aka krb5 before 1.19.4 and 1.20.x before 1.20.1 has integer overflows that may lead to remote code execution in KDC, kadmind, or a GSS or Kerberos application server on 32-bit platforms which have a resultant heap-based buffer overflow, and cause a denial of service ...

8.8CVSS7.4AI score0.06419EPSS
Exploits1References1
OSV
OSV
added 2022/12/25 6:15 a.m.1 views

DEBIAN-CVE-2022-42898

PAC parsing in MIT Kerberos 5 aka krb5 before 1.19.4 and 1.20.x before 1.20.1 has integer overflows that may lead to remote code execution in KDC, kadmind, or a GSS or Kerberos application server on 32-bit platforms which have a resultant heap-based buffer overflow, and cause a denial of service ...

8.8CVSS7.1AI score0.06419EPSS
Exploits1References1
UbuntuCve
UbuntuCve
added 2022/12/25 6:15 a.m.71 views

CVE-2022-42898

PAC parsing in MIT Kerberos 5 aka krb5 before 1.19.4 and 1.20.x before 1.20.1 has integer overflows that may lead to remote code execution in KDC, kadmind, or a GSS or Kerberos application server on 32-bit platforms which have a resultant heap-based buffer overflow, and cause a denial of service ...

8.8CVSS7.4AI score0.06419EPSS
Exploits1References9
OSV
OSV
added 2022/12/25 6:15 a.m.2 views

UBUNTU-CVE-2022-42898

PAC parsing in MIT Kerberos 5 aka krb5 before 1.19.4 and 1.20.x before 1.20.1 has integer overflows that may lead to remote code execution in KDC, kadmind, or a GSS or Kerberos application server on 32-bit platforms which have a resultant heap-based buffer overflow, and cause a denial of service ...

8.8CVSS7.4AI score0.06419EPSS
Exploits1References10
Debian CVE
Debian CVE
added 2022/12/25 12:0 a.m.47 views

CVE-2022-42898

PAC parsing in MIT Kerberos 5 aka krb5 before 1.19.4 and 1.20.x before 1.20.1 has integer overflows that may lead to remote code execution in KDC, kadmind, or a GSS or Kerberos application server on 32-bit platforms which have a resultant heap-based buffer overflow, and cause a denial of service ...

8.8CVSS8.2AI score0.06419EPSS
Exploits1
CVE
CVE
added 2022/12/25 12:0 a.m.1185 views

CVE-2022-42898

CVE-2022-42898 concerns integer overflow in PAC parsing within MIT Kerberos 5 (krb5) via the krb5_pac_parse function in lib/krb5/krb/pac.c. Affected: krb5 before 1.19.4 and 1.20.x before 1.20.1; 32-bit platforms may trigger remote code execution in KDC, kadmind, or a GSS/Kerberos application serv...

8.8CVSS9.2AI score0.06419EPSS
Exploits1References11Affected Software1
OSV
OSV
added 2022/12/22 8:15 p.m.9 views

CVE-2022-34472

If there was a PAC URL set and the server that hosts the PAC was not reachable, OCSP requests would have been blocked, resulting in incorrect error pages being shown. This vulnerability affects Firefox 102, Firefox ESR 91.11, Thunderbird 102, and Thunderbird 91.11...

4.3CVSS8.8AI score
Exploits0References4
Prion
Prion
added 2022/12/22 8:15 p.m.22 views

Design/Logic Flaw

If there was a PAC URL set and the server that hosts the PAC was not reachable, OCSP requests would have been blocked, resulting in incorrect error pages being shown. This vulnerability affects Firefox 102, Firefox ESR 91.11, Thunderbird 102, and Thunderbird 91.11...

4.3CVSS5.7AI score0.0058EPSS
Exploits0References4Affected Software3
Debian CVE
Debian CVE
added 2022/12/22 12:0 a.m.67 views

CVE-2022-34472

If there was a PAC URL set and the server that hosts the PAC was not reachable, OCSP requests would have been blocked, resulting in incorrect error pages being shown. This vulnerability affects Firefox 102, Firefox ESR 91.11, Thunderbird 102, and Thunderbird 91.11...

4.3CVSS7.5AI score0.0058EPSS
Exploits0
Cvelist
Cvelist
added 2022/12/22 12:0 a.m.25 views

CVE-2022-34472

If there was a PAC URL set and the server that hosts the PAC was not reachable, OCSP requests would have been blocked, resulting in incorrect error pages being shown. This vulnerability affects Firefox 102, Firefox ESR 91.11, Thunderbird 102, and Thunderbird 91.11...

6.5AI score0.0058EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2022/12/22 12:0 a.m.8 views

CVE-2022-34472

If there was a PAC URL set and the server that hosts the PAC was not reachable, OCSP requests would have been blocked, resulting in incorrect error pages being shown. This vulnerability affects Firefox 102, Firefox ESR 91.11, Thunderbird 102, and Thunderbird 91.11...

6.4AI score0.0058EPSS
Exploits0References4
CVE
CVE
added 2022/12/22 12:0 a.m.220 views

CVE-2022-34472

CVE-2022-34472 : If a PAC URL is configured and the PAC host is unreachable, OCSP requests are blocked, leading to incorrect error pages being shown. Affected: Firefox &lt; 102, Firefox ESR &lt; 91.11, Thunderbird &lt; 102, Thunderbird

4.3CVSS6.3AI score0.0058EPSS
Exploits0References4Affected Software3
Tenable Nessus
Tenable Nessus
added 2022/12/22 12:0 a.m.38 views

Fedora 35 : samba (2022-003403ec6b)

The remote Fedora 35 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-003403ec6b advisory. Update to version 4.15.12 ---- Update to version 4.15.11 - Security fixes for CVE-2022-3437 Tenable has extracted the preceding description block...

8.8CVSS6.7AI score0.06419EPSS
Exploits1References3
Rows per page
Query Builder