Double free vulnerability in the krb5_recvauth function in MIT Kerberos 5 (krb5) 1.4.1 and earlier allows remote attackers to execute arbitrary code via certain error conditions.
References
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
|
History
02 Feb 2024, 15:24
Type | Values Removed | Values Added |
---|---|---|
CPE | cpe:2.3:a:mit:kerberos_5:1.3.4:*:*:*:*:*:*:* cpe:2.3:a:mit:kerberos_5:1.3.2:*:*:*:*:*:*:* cpe:2.3:a:mit:kerberos_5:1.4:*:*:*:*:*:*:* cpe:2.3:a:mit:kerberos_5:1.3.1:*:*:*:*:*:*:* cpe:2.3:a:mit:kerberos_5:1.3.5:*:*:*:*:*:*:* cpe:2.3:a:mit:kerberos_5:1.3:*:*:*:*:*:*:* cpe:2.3:a:mit:kerberos_5:1.3.6:*:*:*:*:*:*:* cpe:2.3:a:mit:kerberos_5:1.4.1:*:*:*:*:*:*:* |
cpe:2.3:a:mit:kerberos_5:*:*:*:*:*:*:*:* cpe:2.3:o:apple:mac_os_x_server:*:*:*:*:*:*:*:* cpe:2.3:o:debian:debian_linux:3.0:*:*:*:*:*:*:* cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:* cpe:2.3:o:debian:debian_linux:3.1:*:*:*:*:*:*:* |
CVSS |
v2 : v3 : |
v2 : 7.5
v3 : 9.8 |
First Time |
Debian debian Linux
Debian Apple Apple mac Os X Apple mac Os X Server |
|
CWE | CWE-415 | |
References | (VUPEN) http://www.vupen.com/english/advisories/2005/1066 - Broken Link | |
References | (SECUNIA) http://secunia.com/advisories/17135 - Broken Link, Vendor Advisory | |
References | (VUPEN) http://www.vupen.com/english/advisories/2006/3776 - Broken Link | |
References | (BID) http://www.securityfocus.com/bid/14239 - Broken Link, Third Party Advisory, VDB Entry | |
References | (CONECTIVA) http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000993 - Broken Link | |
References | (SECTRACK) http://securitytracker.com/id?1014461 - Broken Link, Third Party Advisory, VDB Entry | |
References | (XF) https://exchange.xforce.ibmcloud.com/vulnerabilities/21055 - Third Party Advisory, VDB Entry | |
References | (REDHAT) http://www.redhat.com/support/errata/RHSA-2005-562.html - Broken Link | |
References | (OVAL) https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9819 - Broken Link | |
References | (APPLE) http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html - Mailing List | |
References | (BUGTRAQ) http://marc.info/?l=bugtraq&m=112119974704542&w=2 - Mailing List, Patch | |
References | (SECUNIA) http://secunia.com/advisories/22090 - Broken Link, Vendor Advisory | |
References | (SUNALERT) http://sunsolve.sun.com/search/document.do?assetkey=1-26-101810-1 - Broken Link | |
References | (TURBO) http://www.turbolinux.com/security/2005/TLSA-2005-78.txt - Broken Link | |
References | (SECUNIA) http://secunia.com/advisories/16041 - Broken Link, Vendor Advisory | |
References | (TRUSTIX) http://www.trustix.org/errata/2005/0036 - Broken Link | |
References | (REDHAT) http://www.redhat.com/support/errata/RHSA-2005-567.html - Broken Link | |
References | (GENTOO) http://www.gentoo.org/security/en/glsa/glsa-200507-11.xml - Third Party Advisory | |
References | (CONFIRM) http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2005-003-recvauth.txt - Patch, Vendor Advisory | |
References | (SUSE) http://www.novell.com/linux/security/advisories/2005_17_sr.html - Broken Link | |
References | (HP) http://www.securityfocus.com/archive/1/446940/100/0/threaded - Broken Link, Third Party Advisory, VDB Entry | |
References | (UBUNTU) https://usn.ubuntu.com/224-1/ - Broken Link | |
References | (DEBIAN) http://www.debian.org/security/2005/dsa-757 - Mailing List, Patch | |
References | (SECUNIA) http://secunia.com/advisories/17899 - Broken Link, Vendor Advisory | |
References | (APPLE) http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html - Mailing List | |
References | (SGI) ftp://patches.sgi.com/support/free/security/advisories/20050703-01-U.asc - Broken Link |
Information
Published : 2005-07-18 04:00
Updated : 2024-02-28 10:42
NVD link : CVE-2005-1689
Mitre link : CVE-2005-1689
CVE.ORG link : CVE-2005-1689
JSON object : View
Products Affected
apple
- mac_os_x_server
- mac_os_x
debian
- debian_linux
mit
- kerberos_5
CWE
CWE-415
Double Free