Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The merge_authdata function in kdc_authdata.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.8.x before 1.8.4 does not properly manage an index into an authorization-data list, which allows remote attackers to cause a denial of service (daemon crash), or possibly obtain sensitive information, spoof authorization, or execute arbitrary code, via a TGS request that triggers an uninitialized pointer dereference, as demonstrated by a request from a Windows Active Directory client.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
MIT Kerberos 5 Key Distribution Center拒绝服务和敏感信息泄露漏洞
Vulnerability Description
MIT Kerberos 5 是一种常用的开源Kerberos实现。 MIT Kerberos 5 (又名krb5) 1.8.4之前的1.8.x版本的Key Distribution Center (KDC)中的kdc_authdata.c的merge_authdata函数不能正确管理授权数据列表的索引。远程攻击者可借助能够触发非法指针解引用的TGS请求导致拒绝服务(守护程序崩溃)或者可能获取敏感信息，欺骗授权，执行任意代码。
CVSS Information
N/A
Vulnerability Type
N/A