Lucene search

Veracode Vulnerability DatabaseVERACODE:43741

HistoryOct 11, 2023 - 4:58 a.m.

Buffer Overflow

2023-10-1104:58:28

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.31 Low

EPSS

Percentile

96.9%

JSON

libkrb5.so is vulnerable to Buffer Overflows. A buffer overflow in the RPC library can be exploited by remote attackers to cause a denial of service or an arbitrary code execution. This vulnerability is only exploitable on systems whose unistd.h header file which does not define the FD_SETSIZE macro.

CPENameOperatorVersion
libkrb5.sole3.3.debug
libkrb5.sole3.3.debug

CPE	Name	Operator	Version
	libkrb5.so	le	3.3.debug
	libkrb5.so	le	3.3.debug

References

access.redhat.com/security/cve/CVE-2008-0948

github.com/krb5/krb5/commit/d8d990c823f7ba6070622acf5ff2d08af7c1d7a9

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.31 Low

EPSS

Percentile

96.9%

JSON

Related for VERACODE:43741