https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T14:29:58.833743+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2015-01984 bdu:2015-01984 2026-10-03T14:29:59.032135+00:00 bdu:2015-01984 https://cve.radiocsirt.org/vuln/euvd-2026-99944 EUVD-2026-99944 2026-10-03T14:29:59.032178+00:00 EUVD-2026-99944 https://cve.radiocsirt.org/vuln/fkie_cve-2014-4343 fkie_cve-2014-4343 2026-10-03T14:29:59.032193+00:00

Double free vulnerability in the init_ctx_reselect function in the SPNEGO initiator in lib/gssapi/spnego/spnego_mech.c in MIT Kerberos 5 (aka krb5) 1.10.x through 1.12.x before 1.12.2 allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via network traffic that appears to come from an intended acceptor, but specifies a security mechanism different from the one proposed by the initiator.

 https://cve.radiocsirt.org/vuln/ghsa-cmrr-h89w-fc55 GHSA-cmrr-h89w-fc55 2026-10-03T14:29:59.032225+00:00

Double free vulnerability in the init_ctx_reselect function in the SPNEGO initiator in lib/gssapi/spnego/spnego_mech.c in MIT Kerberos 5 (aka krb5) 1.10.x through 1.12.x before 1.12.2 allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via network traffic that appears to come from an intended acceptor, but specifies a security mechanism different from the one proposed by the initiator.

 https://cve.radiocsirt.org/vuln/gsd-2014-4343 gsd-2014-4343 2026-10-03T14:29:59.032242+00:00 gsd-2014-4343 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10004-1 openSUSE-SU-2024:10004-1 — krb5-1.15-1.1 on GA media 2026-10-03T14:29:59.032253+00:00

krb5-1.15-1.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2014:1389 RHSA-2014:1389 — Red Hat Security Advisory: krb5 security and bug fix update 2026-10-03T14:29:59.032299+00:00

krb5: multi-realm KDC null dereference leads to crash krb5: KDC remote DoS (NULL pointer dereference and daemon crash) krb5: denial of service flaws when handling padding length longer than the plaintext krb5: denial of service flaws when handling RFC 1964 tokens krb5: double-free flaw in SPNEGO initiators krb5: NULL pointer dereference flaw in SPNEGO acceptor for continuation tokens krb5: buffer overrun in kadmind with LDAP backend (MITKRB5-SA-2014-001)

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2014-4343 UBUNTU-CVE-2014-4343 2026-10-03T14:29:59.032327+00:00

Affected: Ubuntu:14.04:LTS: krb5

Double free vulnerability in the init_ctx_reselect function in the SPNEGO initiator in lib/gssapi/spnego/spnego_mech.c in MIT Kerberos 5 (aka krb5) 1.10.x through 1.12.x before 1.12.2 allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via network traffic that appears to come from an intended acceptor, but specifies a security mechanism different from the one proposed by the initiator.