Mit Kerberos 5 1.14 Beta 2
Approved changes feed: RSS · Atom
cpe:2.3:a:mit:kerberos_5:1.14:beta2:*:*:*:*:*:*
part: a version: 1.14 update: beta2
| Vendor | Mit (82b7f5d9-694f-5ac9-86aa-26958677636b) |
|---|---|
| Product | Kerberos 5 (774ea4a1-4fda-5d25-92ac-c66a6356a1e3) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/krb5/krb5 |
purl2cpe | 2026-06-01 10:16:02.475477 |
pkg:rpm/fedora/krb5 |
purl2cpe | 2026-06-01 10:16:02.475479 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2017-11462 |
vulnerable | 2026-06-08 05:08:37.815717 |
Details available
Double free vulnerability in MIT Kerberos 5 (aka krb5) allows attackers to have unspecified impact via vectors involving automatic deletion of security contexts on error.
Published: 2017-09-13T16:00:00.000Z
Updated: 2024-08-05T18:12:39.893Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-11368 |
vulnerable | 2026-06-08 05:08:37.496225 |
Details available
In MIT Kerberos 5 (aka krb5) 1.7 and later, an authenticated attacker can cause a KDC assertion failure by sending invalid S4U2Self or S4U2Proxy requests.
Published: 2017-08-09T18:00:00.000Z
Updated: 2024-08-05T18:05:30.590Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-3119 |
vulnerable | 2026-06-08 05:07:44.537617 |
Details available
The process_db_args function in plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c in the LDAP KDB module in kadmind in MIT Kerberos 5 (aka krb5) through 1.13.4 and 1.14.x through 1.14.1 mishandles the DB argument, which allows remote authenticated users to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted request to modify a principal.
Published: 2016-03-26T01:00:00.000Z
Updated: 2024-08-05T23:47:57.271Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-8630 |
vulnerable | 2026-06-08 05:07:04.567029 |
Details available
The (1) kadm5_create_principal_3 and (2) kadm5_modify_principal functions in lib/kadm5/srv/svr_principal.c in kadmind in MIT Kerberos 5 (aka krb5) 1.12.x and 1.13.x before 1.13.4 and 1.14.x before 1.14.1 allow remote authenticated users to cause a denial of service (NULL pointer dereference and daemon crash) by specifying KADM5_POLICY with a NULL policy name.
Published: 2016-02-13T02:00:00.000Z
Updated: 2024-08-06T08:20:43.695Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-2698 |
vulnerable | 2026-06-08 05:06:35.589089 |
Details available
The iakerb_gss_export_sec_context function in lib/gssapi/krb5/iakerb.c in MIT Kerberos 5 (aka krb5) 1.14 pre-release 2015-09-14 improperly accesses a certain pointer, which allows remote authenticated users to cause a denial of service (memory corruption) or possibly have unspecified other impact by interacting with an application that calls the gss_export_sec_context function. NOTE: this vulnerability exists because of an incorrect fix for CVE-2015-2696.
Published: 2015-11-13T02:00:00.000Z
Updated: 2024-08-06T05:24:38.603Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.