Plaintext Modification

🗓️ 01 Jul 2024 11:00:24Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 19 Views

libkrb5.so vulnerability plaintext modification attac

Reporter	Title	Published	Views	Family All 227
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM API Connect	15 Mar 202500:18	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to multiple Base OS issues	27 Sep 202422:50	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in MIT Kerberos 5 (aka krb5) affects IBM watsonx Assistant for IBM Cloud Pak for Data	5 Feb 202514:52	–	ibm
IBM Security Bulletins	Security Bulletin: IBM DataPower Gateway vulnerable to data truncation and DoS in Kerberos (CVE-2024-37370 & CVE-2024-37371)	3 Sep 202414:18	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to multiple Operator package issues	27 Sep 202422:45	–	ibm
IBM Security Bulletins	Security Bulletin: IBM MQ Operator and Queue manager container images are vulnerable to GNOME GLib, libcurl and kerberos 5	27 Sep 202411:38	–	ibm
IBM Security Bulletins	Security Bulletin: IBM MQ Operator and Queue manager container images are vulnerable to denial of service, privilege escalation and kerberos 5	6 Sep 202409:28	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in RedHat UBI affect IBM Robotic Process Automation for Cloud Pak	2 Dec 202416:09	–	ibm
IBM Security Bulletins	Security Bulletin: DataStage on Cloud Pak for Data is vulnerable to plaintext token modification due to the krb5 package (CVE-2024-37370)	2 Sep 202514:23	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in MIT Kerberos krb5 (CVE-2024-37370) affects Power HMC.	28 Jan 202522:08	–	ibm

Vulners

Node

krb5 krb5Match1.20.1-r2cpp

AND

krb5 krb5Match1.17.1-r0cpp

AND

krb5 krb5Match1.19.2-r4cpp

AND

krb5 krb5Match1.20.1-r0cpp

AND

krb5 krb5Match1.18.2-r0cpp

AND

krb5 krb5Match1.18.3-r1cpp

AND

krb5 krb5Match1.19.3-r2cpp

AND

krb5 krb5Match1.20.1-r1cpp

AND

krb5 krb5Match1.19.3-r0cpp

AND

krb5 krb5Match1.20-r0cpp

AND

krb5 krb5Match1.18.1-r0cpp

AND

krb5 krb5Match1.18-r0cpp

AND

krb5 krb5Match1.19.3-r1cpp

AND

krb5 krb5Match1.19.2-r2cpp

AND

krb5 krb5Match1.19.2-r0cpp

AND

alpinelinux alpine_linuxMatchedge

krb5 krb5Match1.20.1-r1cpp

AND

krb5 krb5Match1.20.2-r0cpp

AND

alpinelinux alpine_linuxMatch3.18

krb5 krb5Match1.20.2-r0cpp

AND

krb5 krb5Match1.20-r0cpp

AND

krb5 krb5Match1.20.1-r0cpp

AND

alpinelinux alpine_linuxMatch3.17

libkrb5.so libkrb5.soRange3.1.debug–3.3.debugcpp

Source	Link
github	www.github.com/krb5/krb5/commit/55fbf435edbe2e92dd8101669b1ce7144bc96fef
github	www.github.com/advisories/GHSA-wvrw-2fv8-cjvx
security	www.security.netapp.com/advisory/ntap-20241108-0007/
web	www.web.mit.edu/kerberos/www/advisories/

13 Mar 2025 17:22Current

6.5Medium risk

Vulners AI Score6.5

CVSS 3.17.5

EPSS0.00545

SSVC