Lucene search

Veracode Vulnerability DatabaseVERACODE:47841

HistoryJul 01, 2024 - 11:00 a.m.

Plaintext Modification

2024-07-0111:00:24

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

plaintext modification

libkrb5.so

vulnerability

improper modifications

extra count field

gss krb5 wrap token

unwrapped token

application software

6.5 Medium

AI Score

Confidence

Low

JSON

libkrb5.so is vulnerable to a Plaintext Modification attack. The vulnerability is due to improper modifications in the plaintext Extra Count field of a confidential GSS krb5 wrap token, allowing an attacker to make an unwrapped token appear truncated to the application

CPENameOperatorVersion
libkrb5.sole3.3.debug
libkrb5.sole3.3.debug

CPE	Name	Operator	Version
	libkrb5.so	le	3.3.debug
	libkrb5.so	le	3.3.debug

References

github.com/advisories/GHSA-wvrw-2fv8-cjvx

github.com/krb5/krb5/commit/55fbf435edbe2e92dd8101669b1ce7144bc96fef

web.mit.edu/kerberos/www/advisories/

6.5 Medium

AI Score

Confidence

Low

JSON

Related for VERACODE:47841