https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T06:50:07.949701+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2015-01984 bdu:2015-01984 2026-10-03T06:50:08.060880+00:00 bdu:2015-01984 https://cve.radiocsirt.org/vuln/euvd-2026-99937 EUVD-2026-99937 2026-10-03T06:50:08.060919+00:00 EUVD-2026-99937 https://cve.radiocsirt.org/vuln/fkie_cve-2014-4344 fkie_cve-2014-4344 2026-10-03T06:50:08.060933+00:00

The acc_ctx_cont function in the SPNEGO acceptor in lib/gssapi/spnego/spnego_mech.c in MIT Kerberos 5 (aka krb5) 1.5.x through 1.12.x before 1.12.2 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via an empty continuation token at a certain point during a SPNEGO negotiation.

 https://cve.radiocsirt.org/vuln/ghsa-335x-2h4v-298w GHSA-335x-2h4v-298w 2026-10-03T06:50:08.060963+00:00

The acc_ctx_cont function in the SPNEGO acceptor in lib/gssapi/spnego/spnego_mech.c in MIT Kerberos 5 (aka krb5) 1.5.x through 1.12.x before 1.12.2 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via an empty continuation token at a certain point during a SPNEGO negotiation.

 https://cve.radiocsirt.org/vuln/gsd-2014-4344 gsd-2014-4344 2026-10-03T06:50:08.060979+00:00 gsd-2014-4344 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10004-1 openSUSE-SU-2024:10004-1 — krb5-1.15-1.1 on GA media 2026-10-03T06:50:08.060990+00:00

krb5-1.15-1.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2014:1245 RHSA-2014:1245 — Red Hat Security Advisory: krb5 security and bug fix update 2026-10-03T06:50:08.061035+00:00

krb5: multi-realm KDC null dereference leads to crash krb5: KDC remote DoS (NULL pointer dereference and daemon crash) krb5: denial of service flaws when handling padding length longer than the plaintext krb5: NULL pointer dereference flaw in SPNEGO acceptor for continuation tokens

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2014-4344 UBUNTU-CVE-2014-4344 2026-10-03T06:50:08.061054+00:00

Affected: Ubuntu:14.04:LTS: krb5

The acc_ctx_cont function in the SPNEGO acceptor in lib/gssapi/spnego/spnego_mech.c in MIT Kerberos 5 (aka krb5) 1.5.x through 1.12.x before 1.12.2 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via an empty continuation token at a certain point during a SPNEGO negotiation.