Orta CVSS 6.5
CVE-2021-37750: Kerberos 5: NULL işaretçi başvurusu
Açıklama (NVD)
The Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.18.5 and 1.19.x before 1.19.3 has a NULL pointer dereference in kdc/do_tgs_req.c via a FAST inner body that lacks a server field.
Özet bilgiler
- Ürün
- Mit Kerberos 5
- CVSS v3.1
- 6.5
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - EPSS
- %2,51 (yüzdelik 85)
- CWE
- CWE-476
- Yama
- Mevcut
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| mit-kerberos-5 | — | — | 1.18.5 |
| mit-kerberos-5 | 1.19.0 | — | 1.19.3 |
| fedoraproject-fedora | 33 | 33 | — |
| debian-debian-linux | 9.0 | 9.0 | — |
| starwindsoftware-starwind-virtual-san | v8r13 | v8r13 | — |
| oracle-communications-cloud-native-core-network-slice-selection-function | 22.1.0 | 22.1.0 | — |