https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 09:10:34 +0000 https://cve.radiocsirt.org/vuln/cnvd-2015-01112 cnvd-2015-01112 https://cve.radiocsirt.org/vuln/cnvd-2015-01112 https://cve.radiocsirt.org/vuln/euvd-2026-103885 EUVD-2026-103885 https://cve.radiocsirt.org/vuln/euvd-2026-103885 https://cve.radiocsirt.org/vuln/fkie_cve-2014-9423 <p>The svcauth_gss_accept_sec_context function in lib/rpc/svc_auth_gss.c in MIT Kerberos 5 (aka krb5) 1.11.x through 1.11.5, 1.12.x through 1.12.2, and 1.13.x before 1.13.1 transmits uninitialized interposer data to clients, which allows remote attackers to obtain sensitive information from process heap memory by sniffing the network for data in a handle field.</p> <p>The svcauth_gss_accept_sec_context function in lib/rpc/svc_auth_gss.c in MIT Kerberos 5 (aka krb5) 1.11.x through 1.11.5, 1.12.x through 1.12.2, and 1.13.x before 1.13.1 transmits uninitialized interposer data to clients, which allows remote attackers to obtain sensitive information from process heap memory by sniffing the network for data in a handle field.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2014-9423 https://cve.radiocsirt.org/vuln/ghsa-c8r5-76c4-8w9w <p>The svcauth_gss_accept_sec_context function in lib/rpc/svc_auth_gss.c in MIT Kerberos 5 (aka krb5) 1.11.x through 1.11.5, 1.12.x through 1.12.2, and 1.13.x before 1.13.1 transmits uninitialized interposer data to clients, which allows remote attackers to obtain sensitive information from process heap memory by sniffing the network for data in a handle field.</p> <p>The svcauth_gss_accept_sec_context function in lib/rpc/svc_auth_gss.c in MIT Kerberos 5 (aka krb5) 1.11.x through 1.11.5, 1.12.x through 1.12.2, and 1.13.x before 1.13.1 transmits uninitialized interposer data to clients, which allows remote attackers to obtain sensitive information from process heap memory by sniffing the network for data in a handle field.</p> https://cve.radiocsirt.org/vuln/ghsa-c8r5-76c4-8w9w https://cve.radiocsirt.org/vuln/gsd-2014-9423 gsd-2014-9423 https://cve.radiocsirt.org/vuln/gsd-2014-9423 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10004-1 <p>krb5-1.15-1.1 on GA media</p> <p>krb5-1.15-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:10004-1 https://cve.radiocsirt.org/vuln/suse-su-2015:0257-1 <p>Security update for krb5</p> <p>Security update for krb5</p> https://cve.radiocsirt.org/vuln/suse-su-2015:0257-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2014-9423 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: krb5</p> <p>The svcauth_gss_accept_sec_context function in lib/rpc/svc_auth_gss.c in MIT Kerberos 5 (aka krb5) 1.11.x through 1.11.5, 1.12.x through 1.12.2, and 1.13.x before 1.13.1 transmits uninitialized interposer data to clients, which allows remote attackers to obtain sensitive information from process heap memory by sniffing the network for data in a handle field.</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: krb5</p> <p>The svcauth_gss_accept_sec_context function in lib/rpc/svc_auth_gss.c in MIT Kerberos 5 (aka krb5) 1.11.x through 1.11.5, 1.12.x through 1.12.2, and 1.13.x before 1.13.1 transmits uninitialized interposer data to clients, which allows remote attackers to obtain sensitive information from process heap memory by sniffing the network for data in a handle field.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2014-9423