Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntuUbuntuUSN-6947-1
HistoryAug 08, 2024 - 12:00 a.m.

Kerberos vulnerabilities

2024-08-0800:00:00
ubuntu.com
33
kerberos
ubuntu
denial of service
gss message tokens
vulnerabilities
krb5 package

CVSS3

9.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

AI Score

6.9

Confidence

Low

EPSS

0.001

Percentile

37.7%

JSON

Releases

  • Ubuntu 24.04 LTS
  • Ubuntu 22.04 LTS
  • Ubuntu 20.04 LTS
  • Ubuntu 18.04 ESM
  • Ubuntu 16.04 ESM
  • Ubuntu 14.04 ESM

Packages

  • krb5 - MIT Kerberos Network Authentication Protocol

Details

It was discovered that Kerberos incorrectly handled GSS message tokens
where an unwrapped token could appear to be truncated. An attacker
could possibly use this issue to cause a denial of service.
(CVE-2024-37370)

It was discovered that Kerberos incorrectly handled GSS message tokens
when sent a token with invalid length fields. An attacker could possibly
use this issue to cause a denial of service. (CVE-2024-37371)

OSVersionArchitecturePackageVersionFilename
Ubuntu24.04noarchkrb5-admin-server< 1.20.1-6ubuntu2.1UNKNOWN
Ubuntu24.04noarchkrb5-admin-server-dbgsym< 1.20.1-6ubuntu2.1UNKNOWN
Ubuntu24.04noarchkrb5-doc< 1.20.1-6ubuntu2.1UNKNOWN
Ubuntu24.04noarchkrb5-gss-samples< 1.20.1-6ubuntu2.1UNKNOWN
Ubuntu24.04noarchkrb5-gss-samples-dbgsym< 1.20.1-6ubuntu2.1UNKNOWN
Ubuntu24.04noarchkrb5-k5tls< 1.20.1-6ubuntu2.1UNKNOWN
Ubuntu24.04noarchkrb5-k5tls-dbgsym< 1.20.1-6ubuntu2.1UNKNOWN
Ubuntu24.04noarchkrb5-kdc< 1.20.1-6ubuntu2.1UNKNOWN
Ubuntu24.04noarchkrb5-kdc-dbgsym< 1.20.1-6ubuntu2.1UNKNOWN
Ubuntu24.04noarchkrb5-kdc-ldap< 1.20.1-6ubuntu2.1UNKNOWN
Rows per page:
1-10 of 2581

Related

nessus 34
openvas 17
almalinux 2
redhat 13
ubuntucve 2
amazon 1
redos 1
mageia 1
osv 6
oraclelinux 2
ibm 2
photon 3
alpinelinux 2
cbl_mariner 4
veracode 2
fedora 2
nvd 2
cve 2
redhatcve 2
debiancve 2
vulnrichment 2
cvelist 2
nessus
nessus
RHEL 9 : krb5 (RHSA-2024:5643)
2024-08-20 00:00:00
RHEL 8 : krb5 (RHSA-2024:4734)
2024-07-23 00:00:00
EulerOS 2.0 SP10 : krb5 (EulerOS-SA-2024-2419)
2024-09-12 00:00:00
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2024:2305-1)
2024-07-08 00:00:00
Debian: Security Advisory (DSA-5726-1)
2024-07-08 00:00:00
openSUSE: Security Advisory for krb5 (SUSE-SU-2024:2307-1)
2024-07-10 00:00:00
almalinux
almalinux
Moderate: krb5 security update
2024-08-13 00:00:00
Moderate: krb5 security update
2024-09-03 00:00:00
redhat
redhat
(RHSA-2024:5076) Moderate: krb5 security update
2024-08-07 09:57:22
(RHSA-2024:4734) Moderate: krb5 security update
2024-07-23 14:41:35
(RHSA-2024:5625) Moderate: krb5 security update
2024-08-20 15:33:03
ubuntucve
ubuntucve
CVE-2024-37371
2024-06-28 00:00:00
CVE-2024-37370
2024-06-28 00:00:00
amazon
amazon
Medium: krb5
2024-07-18 02:00:00
redos
redos
ROS-20240911-04
2024-09-11 00:00:00
mageia
mageia
Updated krb5 packages fix security vulnerabilities
2024-07-03 19:36:28
osv
osv
krb5 vulnerabilities
2024-08-08 02:20:23
Moderate: krb5 security update
2024-08-13 00:00:00
krb5 - security update
2024-07-05 00:00:00
oraclelinux
oraclelinux
krb5 security update
2024-09-03 00:00:00
krb5 security update
2024-08-13 00:00:00
ibm
ibm
Security Bulletin: IBM DataPower Gateway vulnerable to data truncation and DoS in Kerberos (CVE-2024-37370 & CVE-2024-37371)
2024-09-03 14:18:56
Security Bulletin: IBM MQ Operator and Queue manager container images are vulnerable to denial of service, privilege escalation and kerberos 5
2024-09-06 09:28:18
photon
photon
Critical Photon OS Security Update - PHSA-2024-4.0-0679
2024-09-02 00:00:00
Critical Photon OS Security Update - PHSA-2024-3.0-0791
2024-09-04 00:00:00
Critical Photon OS Security Update - PHSA-2024-5.0-0355
2024-08-26 00:00:00
alpinelinux
alpinelinux
CVE-2024-37371
2024-06-28 23:15:11
CVE-2024-37370
2024-06-28 22:15:02
cbl_mariner
cbl_mariner
CVE-2024-37371 affecting package krb5 for versions less than 1.21.3-1
2024-08-05 03:22:58
CVE-2024-37370 affecting package krb5 for versions less than 1.21.3-1
2024-08-05 03:22:58
CVE-2024-37370 affecting package krb5 for versions less than 1.21.3-1
2024-08-14 20:43:58
veracode
veracode
Plaintext Modification
2024-07-01 11:00:24
Denial Of Service (DoS)
2024-07-01 11:46:03
fedora
fedora
[SECURITY] Fedora 40 Update: krb5-1.21.3-1.fc40
2024-07-13 02:46:57
[SECURITY] Fedora 39 Update: krb5-1.21.3-1.fc39
2024-07-17 01:19:01
nvd
nvd
CVE-2024-37370
2024-06-28 22:15:02
CVE-2024-37371
2024-06-28 23:15:11
cve
cve
CVE-2024-37371
2024-06-28 23:15:11
CVE-2024-37370
2024-06-28 22:15:02
redhatcve
redhatcve
CVE-2024-37370
2024-06-28 05:08:57
CVE-2024-37371
2024-06-28 05:08:51
debiancve
debiancve
CVE-2024-37370
2024-06-28 22:15:02
CVE-2024-37371
2024-06-28 23:15:11
vulnrichment
vulnrichment
CVE-2024-37370
2024-06-28 00:00:00
CVE-2024-37371
2024-06-28 00:00:00
cvelist
cvelist
CVE-2024-37371
2024-06-28 00:00:00
CVE-2024-37370
2024-06-28 00:00:00

CVSS3

9.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

AI Score

6.9

Confidence

Low

EPSS

0.001

Percentile

37.7%

JSON
Related for USN-6947-1
nessus34openvas17almalinux2redhat13ubuntucve2amazon1redos1mageia1osv6oraclelinux2ibm2photon3alpinelinux2cbl_mariner4veracode2fedora2nvd2cve2redhatcve2debiancve2vulnrichment2cvelist2