https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T22:53:03.345587+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2021-01424 bdu:2021-01424 2026-10-02T22:53:03.483580+00:00 bdu:2021-01424 https://cve.radiocsirt.org/vuln/bell-cve-2017-11103 Withdrawn: BELL-CVE-2017-11103 — CVE-2017-11103 does not affect BellSoft software 2026-10-02T22:53:03.483618+00:00

Withdrawn by the publisher.

https://cve.radiocsirt.org/vuln/certfr-2017-avi-214 certfr-2017-avi-214 — Une vulnérabilité a été corrigée dans <span class="textit">Samba</span>. Elle permet à un attaquant de provoquer un con… 2026-10-02T22:53:03.483638+00:00 certfr-2017-avi-214 https://cve.radiocsirt.org/vuln/cleanstart-2024-wm93067 CLEANSTART-2024-WM93067 — Heimdal before 7 2026-10-02T22:53:03.483655+00:00

Affected: CleanStart: heimdal

Security vulnerability affects the heimdal package. Heimdal before 7.

 https://cve.radiocsirt.org/vuln/cnvd-2017-16980 cnvd-2017-16980 2026-10-02T22:53:03.483682+00:00 cnvd-2017-16980 https://cve.radiocsirt.org/vuln/euvd-2026-76530 EUVD-2026-76530 2026-10-02T22:53:03.483695+00:00 EUVD-2026-76530 https://cve.radiocsirt.org/vuln/fkie_cve-2017-11103 fkie_cve-2017-11103 2026-10-02T22:53:03.483706+00:00

Heimdal before 7.4 allows remote attackers to impersonate services with Orpheus' Lyre attacks because it obtains service-principal names in a way that violates the Kerberos 5 protocol specification. In _krb5_extract_ticket() the KDC-REP service name must be obtained from the encrypted version stored in 'enc_part' instead of the unencrypted version stored in 'ticket'. Use of the unencrypted version provides an opportunity for successful server impersonation and other attacks. NOTE: this CVE is only for Heimdal and other products that embed Heimdal code; it does not apply to other instances in which this part of the Kerberos 5 protocol specification is violated.

 https://cve.radiocsirt.org/vuln/ghsa-7cm4-q9wm-9w5g GHSA-7cm4-q9wm-9w5g 2026-10-02T22:53:03.483741+00:00

Heimdal before 7.4 allows remote attackers to impersonate services with Orpheus' Lyre attacks because it obtains service-principal names in a way that violates the Kerberos 5 protocol specification. In _krb5_extract_ticket() the KDC-REP service name must be obtained from the encrypted version stored in 'enc_part' instead of the unencrypted version stored in 'ticket'. Use of the unencrypted version provides an opportunity for successful server impersonation and other attacks. NOTE: this CVE is only for Heimdal and other products that embed Heimdal code; it does not apply to other instances in which this part of the Kerberos 5 protocol specification is violated.

 https://cve.radiocsirt.org/vuln/gsd-2017-11103 gsd-2017-11103 2026-10-02T22:53:03.483760+00:00 gsd-2017-11103 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10946-1 openSUSE-SU-2024:10946-1 — libheimdal-7.7.0-1.11 on GA media 2026-10-02T22:53:03.483770+00:00

libheimdal-7.7.0-1.11 on GA media

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2017-11103 UBUNTU-CVE-2017-11103 2026-10-02T22:53:03.483791+00:00

Affected: Ubuntu:14.04:LTS: heimdal, Ubuntu:14.04:LTS: samba, Ubuntu:16.04:LTS: heimdal, Ubuntu:16.04:LTS: samba

Heimdal before 7.4 allows remote attackers to impersonate services with Orpheus' Lyre attacks because it obtains service-principal names in a way that violates the Kerberos 5 protocol specification. In _krb5_extract_ticket() the KDC-REP service name must be obtained from the encrypted version stored in 'enc_part' instead of the unencrypted version stored in 'ticket'. Use of the unencrypted version provides an opportunity for successful server impersonation and other attacks. NOTE: this CVE is only for Heimdal and other products that embed Heimdal code; it does not apply to other instances in which this part of the Kerberos 5 protocol specification is violated.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0370 WID-SEC-W-2025-0370 — Apple Mac OS: Mehrere Schwachstellen 2026-10-02T22:53:03.483818+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstelle in Apple Mac OS ausnutzen, um Code mit Kernel Privilegien auszuführen, Sicherheitsvorkehrungen zu umgehen, einen Denial of Service Angriff durchzuführen oder vertrauliche Daten einzusehen.