https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T23:04:19.092259+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2023:6699 ALSA-2023:6699 — Moderate: krb5 security and bug fix update 2026-10-04T23:04:19.293139+00:00

Affected: AlmaLinux:9: krb5-devel, AlmaLinux:9: krb5-libs, AlmaLinux:9: krb5-pkinit, AlmaLinux:9: krb5-server, AlmaLinux:9: krb5-server-ldap, AlmaLinux:9: krb5-workstation, AlmaLinux:9: libkadm5

Kerberos is a network authentication system, which can improve the security of your network by eliminating the insecure practice of sending passwords over the network in unencrypted form. It allows clients and servers to authenticate to each other with the help of a trusted third party, the Kerberos key distribution center (KDC).

Security Fix(es):

* krb5: Denial of service through freeing uninitialized pointer (CVE-2023-36054) * krb5: double-free in KDC TGS processing (CVE-2023-39975)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

 https://cve.radiocsirt.org/vuln/bell-cve-2023-39975 Withdrawn: BELL-CVE-2023-39975 — CVE-2023-39975 does not affect BellSoft software 2026-10-04T23:04:19.293211+00:00

Withdrawn by the publisher.

https://cve.radiocsirt.org/vuln/certfr-2024-avi-0044 certfr-2024-avi-0044 — De multiples vulnérabilités ont été découvertes dans Oracle MySQL. Certaines d'entre elles permettent à un attaquant de… 2026-10-04T23:04:19.293231+00:00 certfr-2024-avi-0044 https://cve.radiocsirt.org/vuln/euvd-2026-270667 EUVD-2026-270667 2026-10-04T23:04:19.293249+00:00 EUVD-2026-270667 https://cve.radiocsirt.org/vuln/fkie_cve-2023-39975 fkie_cve-2023-39975 2026-10-04T23:04:19.293261+00:00

kdc/do_tgs_req.c in MIT Kerberos 5 (aka krb5) 1.21 before 1.21.2 has a double free that is reachable if an authenticated user can trigger an authorization-data handling failure. Incorrect data is copied from one ticket to another.

 https://cve.radiocsirt.org/vuln/ghsa-4grv-wgvh-8x82 GHSA-4grv-wgvh-8x82 2026-10-04T23:04:19.293282+00:00

kdc/do_tgs_req.c in MIT Kerberos 5 (aka krb5) 1.21 before 1.21.2 has a double free that is reachable if an authenticated user can trigger an authorization-data handling failure. Incorrect data is copied from one ticket to another.

 https://cve.radiocsirt.org/vuln/gsd-2023-39975 gsd-2023-39975 2026-10-04T23:04:19.293296+00:00 gsd-2023-39975 https://cve.radiocsirt.org/vuln/opensuse-su-2024:13527-1 openSUSE-SU-2024:13527-1 — krb5-1.21.2-1.1 on GA media 2026-10-04T23:04:19.293306+00:00

krb5-1.21.2-1.1 on GA media

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2035 WID-SEC-W-2023-2035 — MIT Kerberos: Schwachstelle ermöglicht Denial of Service 2026-10-04T23:04:19.293323+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in MIT Kerberos ausnutzen, um einen Denial of Service Angriff durchzuführen.