Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The do_standalone function in the MIT krb5 KDC database propagation daemon (kpropd) in Kerberos 1.7, 1.8, and 1.9, when running in standalone mode, does not properly handle when a worker child process "exits abnormally," which allows remote attackers to cause a denial of service (listening process termination, no new connections, and lack of updates in slave KVC) via unspecified vectors.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Mit Kerberos kpropd do_standalone函数输入验证漏洞
Vulnerability Description
Kerberos 是一款广泛使用的使用强壮的加密来验证客户端和服务器端的网络协议。 当运行在standalone模式下时,Kerberos 1.7,1.8,和1.9版本中的MIT krb5 KDC数据库传播守护进程(kpropd)中的do_standalone函数没有对工作子进程的"不正常退出"进行正确处理。远程攻击者可以借助未明向量导致拒绝服务(监听进程终止,无新连接,在KVC中缺乏更新)。
CVSS Information
N/A
Vulnerability Type
N/A