In MIT Kerberos 5 (aka krb5) before 1.21.3, an attacker can cause invalid memory reads during GSS message token handling by sending message tokens with invalid length fields.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support | RedHat | krb5-0:1.18.2-9.el8_4.1 | * |
Red Hat Enterprise Linux 8.4 Telecommunications Update Service | RedHat | krb5-0:1.18.2-9.el8_4.1 | * |
Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions | RedHat | krb5-0:1.18.2-9.el8_4.1 | * |
Red Hat Enterprise Linux 8.8 Extended Update Support | RedHat | krb5-0:1.18.2-26.el8_8.2 | * |
Krb5 | Ubuntu | devel | * |
Krb5 | Ubuntu | esm-apps/bionic | * |
Krb5 | Ubuntu | esm-infra-legacy/trusty | * |
Krb5 | Ubuntu | esm-infra/bionic | * |
Krb5 | Ubuntu | esm-infra/xenial | * |
Krb5 | Ubuntu | focal | * |
Krb5 | Ubuntu | jammy | * |
Krb5 | Ubuntu | mantic | * |
Krb5 | Ubuntu | noble | * |
Krb5 | Ubuntu | trusty/esm | * |
Krb5 | Ubuntu | upstream | * |