https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T15:03:32.465054+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bell-cve-2017-17439 Withdrawn: BELL-CVE-2017-17439 — CVE-2017-17439 does not affect BellSoft software 2026-10-03T15:03:32.597360+00:00

Withdrawn by the publisher.

https://cve.radiocsirt.org/vuln/cleanstart-2024-zn45970 CLEANSTART-2024-ZN45970 — In Heimdal through 7 2026-10-03T15:03:32.597399+00:00

Affected: CleanStart: heimdal

Security vulnerability affects the heimdal package. In Heimdal through 7.

 https://cve.radiocsirt.org/vuln/cnvd-2018-00308 cnvd-2018-00308 2026-10-03T15:03:32.597437+00:00 cnvd-2018-00308 https://cve.radiocsirt.org/vuln/euvd-2026-79539 EUVD-2026-79539 2026-10-03T15:03:32.597453+00:00 EUVD-2026-79539 https://cve.radiocsirt.org/vuln/fkie_cve-2017-17439 fkie_cve-2017-17439 2026-10-03T15:03:32.597466+00:00

In Heimdal through 7.4, remote unauthenticated attackers are able to crash the KDC by sending a crafted UDP packet containing empty data fields for client name or realm. The parser would unconditionally dereference NULL pointers in that case, leading to a segmentation fault. This is related to the _kdc_as_rep function in kdc/kerberos5.c and the der_length_visible_string function in lib/asn1/der_length.c.

 https://cve.radiocsirt.org/vuln/ghsa-gc5p-r2vh-qc88 GHSA-gc5p-r2vh-qc88 2026-10-03T15:03:32.597490+00:00

In Heimdal through 7.4, remote unauthenticated attackers are able to crash the KDC by sending a crafted UDP packet containing empty data fields for client name or realm. The parser would unconditionally dereference NULL pointers in that case, leading to a segmentation fault. This is related to the _kdc_as_rep function in kdc/kerberos5.c and the der_length_visible_string function in lib/asn1/der_length.c.

 https://cve.radiocsirt.org/vuln/gsd-2017-17439 gsd-2017-17439 2026-10-03T15:03:32.597506+00:00 gsd-2017-17439 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10946-1 openSUSE-SU-2024:10946-1 — libheimdal-7.7.0-1.11 on GA media 2026-10-03T15:03:32.597517+00:00

libheimdal-7.7.0-1.11 on GA media

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2017-17439 Withdrawn: UBUNTU-CVE-2017-17439 2026-10-03T15:03:32.597536+00:00

Withdrawn by the publisher.

Affected: Ubuntu:18.04:LTS: heimdal

In Heimdal through 7.4, remote unauthenticated attackers are able to crash the KDC by sending a crafted UDP packet containing empty data fields for client name or realm. The parser would unconditionally dereference NULL pointers in that case, leading to a segmentation fault. This is related to the _kdc_as_rep function in kdc/kerberos5.c and the der_length_visible_string function in lib/asn1/der_length.c.