https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 15:05:02 +0000 https://cve.radiocsirt.org/vuln/bell-cve-2017-17439 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Withdrawn by the publisher.</strong></p> https://cve.radiocsirt.org/vuln/bell-cve-2017-17439 https://cve.radiocsirt.org/vuln/cleanstart-2024-zn45970 <p><strong>Affected:</strong> CleanStart: heimdal</p> <p>Security vulnerability affects the heimdal package. In Heimdal through 7.</p> <p><strong>Affected:</strong> CleanStart: heimdal</p> <p>Security vulnerability affects the heimdal package. In Heimdal through 7.</p> https://cve.radiocsirt.org/vuln/cleanstart-2024-zn45970 https://cve.radiocsirt.org/vuln/cnvd-2018-00308 cnvd-2018-00308 https://cve.radiocsirt.org/vuln/cnvd-2018-00308 https://cve.radiocsirt.org/vuln/euvd-2026-79539 EUVD-2026-79539 https://cve.radiocsirt.org/vuln/euvd-2026-79539 https://cve.radiocsirt.org/vuln/fkie_cve-2017-17439 <p>In Heimdal through 7.4, remote unauthenticated attackers are able to crash the KDC by sending a crafted UDP packet containing empty data fields for client name or realm. The parser would unconditionally dereference NULL pointers in that case, leading to a segmentation fault. This is related to the _kdc_as_rep function in kdc/kerberos5.c and the der_length_visible_string function in lib/asn1/der_length.c.</p> <p>In Heimdal through 7.4, remote unauthenticated attackers are able to crash the KDC by sending a crafted UDP packet containing empty data fields for client name or realm. The parser would unconditionally dereference NULL pointers in that case, leading to a segmentation fault. This is related to the _kdc_as_rep function in kdc/kerberos5.c and the der_length_visible_string function in lib/asn1/der_length.c.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2017-17439 https://cve.radiocsirt.org/vuln/ghsa-gc5p-r2vh-qc88 <p>In Heimdal through 7.4, remote unauthenticated attackers are able to crash the KDC by sending a crafted UDP packet containing empty data fields for client name or realm. The parser would unconditionally dereference NULL pointers in that case, leading to a segmentation fault. This is related to the _kdc_as_rep function in kdc/kerberos5.c and the der_length_visible_string function in lib/asn1/der_length.c.</p> <p>In Heimdal through 7.4, remote unauthenticated attackers are able to crash the KDC by sending a crafted UDP packet containing empty data fields for client name or realm. The parser would unconditionally dereference NULL pointers in that case, leading to a segmentation fault. This is related to the _kdc_as_rep function in kdc/kerberos5.c and the der_length_visible_string function in lib/asn1/der_length.c.</p> https://cve.radiocsirt.org/vuln/ghsa-gc5p-r2vh-qc88 https://cve.radiocsirt.org/vuln/gsd-2017-17439 gsd-2017-17439 https://cve.radiocsirt.org/vuln/gsd-2017-17439 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10946-1 <p>libheimdal-7.7.0-1.11 on GA media</p> <p>libheimdal-7.7.0-1.11 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:10946-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2017-17439 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> Ubuntu:18.04:LTS: heimdal</p> <p>In Heimdal through 7.4, remote unauthenticated attackers are able to crash the KDC by sending a crafted UDP packet containing empty data fields for client name or realm. The parser would unconditionally dereference NULL pointers in that case, leading to a segmentation fault. This is related to the _kdc_as_rep function in kdc/kerberos5.c and the der_length_visible_string function in lib/asn1/der_length.c.</p> <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> Ubuntu:18.04:LTS: heimdal</p> <p>In Heimdal through 7.4, remote unauthenticated attackers are able to crash the KDC by sending a crafted UDP packet containing empty data fields for client name or realm. The parser would unconditionally dereference NULL pointers in that case, leading to a segmentation fault. This is related to the _kdc_as_rep function in kdc/kerberos5.c and the der_length_visible_string function in lib/asn1/der_length.c.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2017-17439