https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 04:34:15 +0000 https://cve.radiocsirt.org/vuln/alsa-2025:2722 <p><strong>Affected:</strong> AlmaLinux:8: krb5-devel, AlmaLinux:8: krb5-libs, AlmaLinux:8: krb5-pkinit, AlmaLinux:8: krb5-server, AlmaLinux:8: krb5-server-ldap, AlmaLinux:8: krb5-workstation, AlmaLinux:8: libkadm5</p> <p>Kerberos is a network authentication system, which can improve the security of your network by eliminating the insecure practice of sending passwords over the network in unencrypted form. It allows clients and servers to authenticate to each other with the help of a trusted third party, the Kerberos key distribution center (KDC).</p> <p>Security Fix:</p> <p>* CVE-2025-24528 krb5: overflow when calculating ulog block size</p> <p>Bug fix:</p> <p>* kdb5_util: fix DB entry flags on modification</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p><strong>Affected:</strong> AlmaLinux:8: krb5-devel, AlmaLinux:8: krb5-libs, AlmaLinux:8: krb5-pkinit, AlmaLinux:8: krb5-server, AlmaLinux:8: krb5-server-ldap, AlmaLinux:8: krb5-workstation, AlmaLinux:8: libkadm5</p> <p>Kerberos is a network authentication system, which can improve the security of your network by eliminating the insecure practice of sending passwords over the network in unencrypted form. It allows clients and servers to authenticate to each other with the help of a trusted third party, the Kerberos key distribution center (KDC).</p> <p>Security Fix:</p> <p>* CVE-2025-24528 krb5: overflow when calculating ulog block size</p> <p>Bug fix:</p> <p>* kdb5_util: fix DB entry flags on modification</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> https://cve.radiocsirt.org/vuln/alsa-2025:2722 https://cve.radiocsirt.org/vuln/bdu:2025-12302 bdu:2025-12302 https://cve.radiocsirt.org/vuln/bdu:2025-12302 https://cve.radiocsirt.org/vuln/bell-cve-2025-24528 <p><strong>Affected:</strong> Alpaquita:23: krb5, Alpaquita:25: krb5, Alpaquita:stream: krb5</p> <p><strong>Affected:</strong> Alpaquita:23: krb5, Alpaquita:25: krb5, Alpaquita:stream: krb5</p> https://cve.radiocsirt.org/vuln/bell-cve-2025-24528 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0524 certfr-2025-avi-0524 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0524 https://cve.radiocsirt.org/vuln/euvd-2026-265952 EUVD-2026-265952 https://cve.radiocsirt.org/vuln/euvd-2026-265952 https://cve.radiocsirt.org/vuln/fkie_cve-2025-24528 <p>In MIT Kerberos 5 (aka krb5) before 1.22 (with incremental propagation), there is an integer overflow for a large update size to resize() in kdb_log.c. An authenticated attacker can cause an out-of-bounds write and kadmind daemon crash.</p> <p>In MIT Kerberos 5 (aka krb5) before 1.22 (with incremental propagation), there is an integer overflow for a large update size to resize() in kdb_log.c. An authenticated attacker can cause an out-of-bounds write and kadmind daemon crash.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-24528 https://cve.radiocsirt.org/vuln/ghsa-wrjh-fhfj-xhfm <p>In MIT Kerberos 5 (aka krb5) before 1.22 (with incremental propagation), there is an integer overflow for a large update size to resize() in kdb_log.c. An authenticated attacker can cause an out-of-bounds write and kadmind daemon crash.</p> <p>In MIT Kerberos 5 (aka krb5) before 1.22 (with incremental propagation), there is an integer overflow for a large update size to resize() in kdb_log.c. An authenticated attacker can cause an out-of-bounds write and kadmind daemon crash.</p> https://cve.radiocsirt.org/vuln/ghsa-wrjh-fhfj-xhfm https://cve.radiocsirt.org/vuln/msrc_cve-2025-24528 msrc_CVE-2025-24528 https://cve.radiocsirt.org/vuln/msrc_cve-2025-24528 https://cve.radiocsirt.org/vuln/oesa-2025-1135 <p><strong>Affected:</strong> openEuler:22.03-LTS-SP3: krb5, openEuler:22.03-LTS-SP4: krb5, openEuler:24.03-LTS: krb5, openEuler:24.03-LTS-SP1: krb5, openEuler:20.03-LTS-SP4: krb5</p> <p>Kerberos is a network authentication protocol. It is designed to provide strong authentication for client/server applications by using secret-key cryptography. Security Fix(es):</p> <p>In MIT krb5 release 1.7 and later with incremental propagation enabled, an authenticated attacker can cause kadmind to write beyond the end of the mapped region for the iprop log file, likely causing a process crash.(CVE-2025-24528)</p> <p><strong>Affected:</strong> openEuler:22.03-LTS-SP3: krb5, openEuler:22.03-LTS-SP4: krb5, openEuler:24.03-LTS: krb5, openEuler:24.03-LTS-SP1: krb5, openEuler:20.03-LTS-SP4: krb5</p> <p>Kerberos is a network authentication protocol. It is designed to provide strong authentication for client/server applications by using secret-key cryptography. Security Fix(es):</p> <p>In MIT krb5 release 1.7 and later with incremental propagation enabled, an authenticated attacker can cause kadmind to write beyond the end of the mapped region for the iprop log file, likely causing a process crash.(CVE-2025-24528)</p> https://cve.radiocsirt.org/vuln/oesa-2025-1135 https://cve.radiocsirt.org/vuln/opensuse-su-2025:14736-1 <p>krb5-1.21.3-2.1 on GA media</p> <p>krb5-1.21.3-2.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2025:14736-1 https://cve.radiocsirt.org/vuln/rhsa-2025:2789 <p>golang: net/http: net/http: sensitive headers incorrectly sent after cross-domain redirect libxml2: Use-After-Free in libxml2 crypto/internal/nistec: golang: Timing sidechannel for P-256 on ppc64le in crypto/internal/nistec krb5: overflow when calculating ulog block size libxml2: Stack-based buffer overflow in xmlSnprintfElements of libxml2</p> <p>golang: net/http: net/http: sensitive headers incorrectly sent after cross-domain redirect libxml2: Use-After-Free in libxml2 crypto/internal/nistec: golang: Timing sidechannel for P-256 on ppc64le in crypto/internal/nistec krb5: overflow when calculating ulog block size libxml2: Stack-based buffer overflow in xmlSnprintfElements of libxml2</p> https://cve.radiocsirt.org/vuln/rhsa-2025:2789 https://cve.radiocsirt.org/vuln/suse-su-2025:0304-1 <p>Security update for krb5</p> <p>Security update for krb5</p> https://cve.radiocsirt.org/vuln/suse-su-2025:0304-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-24528 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: krb5, Ubuntu:Pro:16.04:LTS: krb5, Ubuntu:Pro:18.04:LTS: krb5, Ubuntu:20.04:LTS: krb5, Ubuntu:22.04:LTS: krb5, Ubuntu:24.04:LTS: krb5, Ubuntu:25.10: krb5</p> <p>In MIT Kerberos 5 (aka krb5) before 1.22 (with incremental propagation), there is an integer overflow for a large update size to resize() in kdb_log.c. An authenticated attacker can cause an out-of-bounds write and kadmind daemon crash.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: krb5, Ubuntu:Pro:16.04:LTS: krb5, Ubuntu:Pro:18.04:LTS: krb5, Ubuntu:20.04:LTS: krb5, Ubuntu:22.04:LTS: krb5, Ubuntu:24.04:LTS: krb5, Ubuntu:25.10: krb5</p> <p>In MIT Kerberos 5 (aka krb5) before 1.22 (with incremental propagation), there is an integer overflow for a large update size to resize() in kdb_log.c. An authenticated attacker can cause an out-of-bounds write and kadmind daemon crash.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-24528 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0218 <p>Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in MIT Kerberos ausnutzen, um einen Denial of Service Angriff durchzuführen.</p> <p>Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in MIT Kerberos ausnutzen, um einen Denial of Service Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0218