https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T09:10:34.714256+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2015-01112 cnvd-2015-01112 2026-10-03T09:10:34.724282+00:00 cnvd-2015-01112 https://cve.radiocsirt.org/vuln/euvd-2026-103885 EUVD-2026-103885 2026-10-03T09:10:34.724318+00:00 EUVD-2026-103885 https://cve.radiocsirt.org/vuln/fkie_cve-2014-9423 fkie_cve-2014-9423 2026-10-03T09:10:34.724332+00:00

The svcauth_gss_accept_sec_context function in lib/rpc/svc_auth_gss.c in MIT Kerberos 5 (aka krb5) 1.11.x through 1.11.5, 1.12.x through 1.12.2, and 1.13.x before 1.13.1 transmits uninitialized interposer data to clients, which allows remote attackers to obtain sensitive information from process heap memory by sniffing the network for data in a handle field.

 https://cve.radiocsirt.org/vuln/ghsa-c8r5-76c4-8w9w GHSA-c8r5-76c4-8w9w 2026-10-03T09:10:34.724362+00:00

The svcauth_gss_accept_sec_context function in lib/rpc/svc_auth_gss.c in MIT Kerberos 5 (aka krb5) 1.11.x through 1.11.5, 1.12.x through 1.12.2, and 1.13.x before 1.13.1 transmits uninitialized interposer data to clients, which allows remote attackers to obtain sensitive information from process heap memory by sniffing the network for data in a handle field.

 https://cve.radiocsirt.org/vuln/gsd-2014-9423 gsd-2014-9423 2026-10-03T09:10:34.724377+00:00 gsd-2014-9423 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10004-1 openSUSE-SU-2024:10004-1 — krb5-1.15-1.1 on GA media 2026-10-03T09:10:34.724388+00:00

krb5-1.15-1.1 on GA media

 https://cve.radiocsirt.org/vuln/suse-su-2015:0257-1 SUSE-SU-2015:0257-1 — Security update for krb5 2026-10-03T09:10:34.724417+00:00

Security update for krb5

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2014-9423 UBUNTU-CVE-2014-9423 2026-10-03T09:10:34.724432+00:00

Affected: Ubuntu:14.04:LTS: krb5

The svcauth_gss_accept_sec_context function in lib/rpc/svc_auth_gss.c in MIT Kerberos 5 (aka krb5) 1.11.x through 1.11.5, 1.12.x through 1.12.2, and 1.13.x before 1.13.1 transmits uninitialized interposer data to clients, which allows remote attackers to obtain sensitive information from process heap memory by sniffing the network for data in a handle field.