https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 20:00:47 +0000 https://cve.radiocsirt.org/vuln/alsa-2023:6699 <p><strong>Affected:</strong> AlmaLinux:9: krb5-devel, AlmaLinux:9: krb5-libs, AlmaLinux:9: krb5-pkinit, AlmaLinux:9: krb5-server, AlmaLinux:9: krb5-server-ldap, AlmaLinux:9: krb5-workstation, AlmaLinux:9: libkadm5</p> <p>Kerberos is a network authentication system, which can improve the security of your network by eliminating the insecure practice of sending passwords over the network in unencrypted form. It allows clients and servers to authenticate to each other with the help of a trusted third party, the Kerberos key distribution center (KDC).</p> <p>Security Fix(es):</p> <p>* krb5: Denial of service through freeing uninitialized pointer (CVE-2023-36054) * krb5: double-free in KDC TGS processing (CVE-2023-39975)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p>Additional Changes:</p> <p>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</p> <p><strong>Affected:</strong> AlmaLinux:9: krb5-devel, AlmaLinux:9: krb5-libs, AlmaLinux:9: krb5-pkinit, AlmaLinux:9: krb5-server, AlmaLinux:9: krb5-server-ldap, AlmaLinux:9: krb5-workstation, AlmaLinux:9: libkadm5</p> <p>Kerberos is a network authentication system, which can improve the security of your network by eliminating the insecure practice of sending passwords over the network in unencrypted form. It allows clients and servers to authenticate to each other with the help of a trusted third party, the Kerberos key distribution center (KDC).</p> <p>Security Fix(es):</p> <p>* krb5: Denial of service through freeing uninitialized pointer (CVE-2023-36054) * krb5: double-free in KDC TGS processing (CVE-2023-39975)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p>Additional Changes:</p> <p>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</p> https://cve.radiocsirt.org/vuln/alsa-2023:6699 https://cve.radiocsirt.org/vuln/bell-cve-2023-39975 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Withdrawn by the publisher.</strong></p> https://cve.radiocsirt.org/vuln/bell-cve-2023-39975 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0044 certfr-2024-avi-0044 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0044 https://cve.radiocsirt.org/vuln/euvd-2026-270667 EUVD-2026-270667 https://cve.radiocsirt.org/vuln/euvd-2026-270667 https://cve.radiocsirt.org/vuln/fkie_cve-2023-39975 <p>kdc/do_tgs_req.c in MIT Kerberos 5 (aka krb5) 1.21 before 1.21.2 has a double free that is reachable if an authenticated user can trigger an authorization-data handling failure. Incorrect data is copied from one ticket to another.</p> <p>kdc/do_tgs_req.c in MIT Kerberos 5 (aka krb5) 1.21 before 1.21.2 has a double free that is reachable if an authenticated user can trigger an authorization-data handling failure. Incorrect data is copied from one ticket to another.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-39975 https://cve.radiocsirt.org/vuln/ghsa-4grv-wgvh-8x82 <p>kdc/do_tgs_req.c in MIT Kerberos 5 (aka krb5) 1.21 before 1.21.2 has a double free that is reachable if an authenticated user can trigger an authorization-data handling failure. Incorrect data is copied from one ticket to another.</p> <p>kdc/do_tgs_req.c in MIT Kerberos 5 (aka krb5) 1.21 before 1.21.2 has a double free that is reachable if an authenticated user can trigger an authorization-data handling failure. Incorrect data is copied from one ticket to another.</p> https://cve.radiocsirt.org/vuln/ghsa-4grv-wgvh-8x82 https://cve.radiocsirt.org/vuln/gsd-2023-39975 gsd-2023-39975 https://cve.radiocsirt.org/vuln/gsd-2023-39975 https://cve.radiocsirt.org/vuln/opensuse-su-2024:13527-1 <p>krb5-1.21.2-1.1 on GA media</p> <p>krb5-1.21.2-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:13527-1 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2035 <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in MIT Kerberos ausnutzen, um einen Denial of Service Angriff durchzuführen.</p> <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in MIT Kerberos ausnutzen, um einen Denial of Service Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2035