7.5
Élevée
CVE-2019-14844 A flaw was found in, Fedora versions of krb5 from 1.16.1 to, including 1.17.x, in the way a Kerberos client could…
Description
A flaw was found in, Fedora versions of krb5 from 1.16.1 to, including 1.17.x, in the way a Kerberos client could crash the KDC by sending one of the RFC 4556 "enctypes". A remote unauthenticated user could use this flaw to crash the KDC.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| krb5 | Versions non publiées |
Autres CVE de krb5
Les 4 CVE de krb5 →
CVE-2026-107778
MIT Kerberos 5 (krb5) through 1.22.2 contains a NULL pointer dereference in make_cred_list() in rd_cred.c that allows…
7.1
Élevée
CVE-2026-107708
MIT krb5 through 1.22.2 contains a NULL pointer dereference vulnerability in the KDC's get_pac_princ_with_realm() that…
6.9
Moyenne
CVE-2017-7562
An authentication bypass flaw was found in the way krb5's certauth interface before 1.16.1 handled the validation of…
6.5
Moyenne