Yüksek CVSS 7.5
CVE-2021-36222: Kerberos 5: NULL işaretçi başvurusu
Açıklama (NVD)
ec_verify in kdc/kdc_preauth_ec.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.18.4 and 1.19.x before 1.19.2 allows remote attackers to cause a NULL pointer dereference and daemon crash. This occurs because a return value is not properly managed in a certain situation.
Özet bilgiler
- Ürün
- Mit Kerberos 5
- CVSS v3.1
- 7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - EPSS
- %10,51 (yüzdelik 96)
- CWE
- CWE-476
- Yama
- Mevcut
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| mit-kerberos-5 | — | — | 1.18.4 |
| mit-kerberos-5 | 1.19.0 | — | 1.19.2 |
| debian-debian-linux | 10.0 | 10.0 | — |
| netapp-active-iq-unified-manager | — | — | — |
| netapp-active-iq-unified-manager | — | — | — |
| netapp-oncommand-insight | — | — | — |
| netapp-oncommand-workflow-automation | — | — | — |
| netapp-snapcenter | — | — | — |
| oracle-mysql-server | 8.0.0 | 8.0.26 | — |