https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 22:53:19 +0000 https://cve.radiocsirt.org/vuln/bdu:2021-01424 bdu:2021-01424 https://cve.radiocsirt.org/vuln/bdu:2021-01424 https://cve.radiocsirt.org/vuln/bell-cve-2017-11103 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Withdrawn by the publisher.</strong></p> https://cve.radiocsirt.org/vuln/bell-cve-2017-11103 https://cve.radiocsirt.org/vuln/certfr-2017-avi-214 certfr-2017-avi-214 https://cve.radiocsirt.org/vuln/certfr-2017-avi-214 https://cve.radiocsirt.org/vuln/cleanstart-2024-wm93067 <p><strong>Affected:</strong> CleanStart: heimdal</p> <p>Security vulnerability affects the heimdal package. Heimdal before 7.</p> <p><strong>Affected:</strong> CleanStart: heimdal</p> <p>Security vulnerability affects the heimdal package. Heimdal before 7.</p> https://cve.radiocsirt.org/vuln/cleanstart-2024-wm93067 https://cve.radiocsirt.org/vuln/cnvd-2017-16980 cnvd-2017-16980 https://cve.radiocsirt.org/vuln/cnvd-2017-16980 https://cve.radiocsirt.org/vuln/euvd-2026-76530 EUVD-2026-76530 https://cve.radiocsirt.org/vuln/euvd-2026-76530 https://cve.radiocsirt.org/vuln/fkie_cve-2017-11103 <p>Heimdal before 7.4 allows remote attackers to impersonate services with Orpheus&#39; Lyre attacks because it obtains service-principal names in a way that violates the Kerberos 5 protocol specification. In _krb5_extract_ticket() the KDC-REP service name must be obtained from the encrypted version stored in &#39;enc_part&#39; instead of the unencrypted version stored in &#39;ticket&#39;. Use of the unencrypted version provides an opportunity for successful server impersonation and other attacks. NOTE: this CVE is only for Heimdal and other products that embed Heimdal code; it does not apply to other instances in which this part of the Kerberos 5 protocol specification is violated.</p> <p>Heimdal before 7.4 allows remote attackers to impersonate services with Orpheus&#39; Lyre attacks because it obtains service-principal names in a way that violates the Kerberos 5 protocol specification. In _krb5_extract_ticket() the KDC-REP service name must be obtained from the encrypted version stored in &#39;enc_part&#39; instead of the unencrypted version stored in &#39;ticket&#39;. Use of the unencrypted version provides an opportunity for successful server impersonation and other attacks. NOTE: this CVE is only for Heimdal and other products that embed Heimdal code; it does not apply to other instances in which this part of the Kerberos 5 protocol specification is violated.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2017-11103 https://cve.radiocsirt.org/vuln/ghsa-7cm4-q9wm-9w5g <p>Heimdal before 7.4 allows remote attackers to impersonate services with Orpheus&#39; Lyre attacks because it obtains service-principal names in a way that violates the Kerberos 5 protocol specification. In _krb5_extract_ticket() the KDC-REP service name must be obtained from the encrypted version stored in &#39;enc_part&#39; instead of the unencrypted version stored in &#39;ticket&#39;. Use of the unencrypted version provides an opportunity for successful server impersonation and other attacks. NOTE: this CVE is only for Heimdal and other products that embed Heimdal code; it does not apply to other instances in which this part of the Kerberos 5 protocol specification is violated.</p> <p>Heimdal before 7.4 allows remote attackers to impersonate services with Orpheus&#39; Lyre attacks because it obtains service-principal names in a way that violates the Kerberos 5 protocol specification. In _krb5_extract_ticket() the KDC-REP service name must be obtained from the encrypted version stored in &#39;enc_part&#39; instead of the unencrypted version stored in &#39;ticket&#39;. Use of the unencrypted version provides an opportunity for successful server impersonation and other attacks. NOTE: this CVE is only for Heimdal and other products that embed Heimdal code; it does not apply to other instances in which this part of the Kerberos 5 protocol specification is violated.</p> https://cve.radiocsirt.org/vuln/ghsa-7cm4-q9wm-9w5g https://cve.radiocsirt.org/vuln/gsd-2017-11103 gsd-2017-11103 https://cve.radiocsirt.org/vuln/gsd-2017-11103 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10946-1 <p>libheimdal-7.7.0-1.11 on GA media</p> <p>libheimdal-7.7.0-1.11 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:10946-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2017-11103 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: heimdal, Ubuntu:14.04:LTS: samba, Ubuntu:16.04:LTS: heimdal, Ubuntu:16.04:LTS: samba</p> <p>Heimdal before 7.4 allows remote attackers to impersonate services with Orpheus&#39; Lyre attacks because it obtains service-principal names in a way that violates the Kerberos 5 protocol specification. In _krb5_extract_ticket() the KDC-REP service name must be obtained from the encrypted version stored in &#39;enc_part&#39; instead of the unencrypted version stored in &#39;ticket&#39;. Use of the unencrypted version provides an opportunity for successful server impersonation and other attacks. NOTE: this CVE is only for Heimdal and other products that embed Heimdal code; it does not apply to other instances in which this part of the Kerberos 5 protocol specification is violated.</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: heimdal, Ubuntu:14.04:LTS: samba, Ubuntu:16.04:LTS: heimdal, Ubuntu:16.04:LTS: samba</p> <p>Heimdal before 7.4 allows remote attackers to impersonate services with Orpheus&#39; Lyre attacks because it obtains service-principal names in a way that violates the Kerberos 5 protocol specification. In _krb5_extract_ticket() the KDC-REP service name must be obtained from the encrypted version stored in &#39;enc_part&#39; instead of the unencrypted version stored in &#39;ticket&#39;. Use of the unencrypted version provides an opportunity for successful server impersonation and other attacks. NOTE: this CVE is only for Heimdal and other products that embed Heimdal code; it does not apply to other instances in which this part of the Kerberos 5 protocol specification is violated.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2017-11103 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0370 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstelle in Apple Mac OS ausnutzen, um Code mit Kernel Privilegien auszuführen, Sicherheitsvorkehrungen zu umgehen, einen Denial of Service Angriff durchzuführen oder vertrauliche Daten einzusehen.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstelle in Apple Mac OS ausnutzen, um Code mit Kernel Privilegien auszuführen, Sicherheitsvorkehrungen zu umgehen, einen Denial of Service Angriff durchzuführen oder vertrauliche Daten einzusehen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0370