Mit الثغرات

التسلسل الزمني

النوع

منتج

MIT Kerberos123
MIT Kerberos 517
MIT krb5-appl2
MIT Lifelong Kindergarten Scratch scratch-vm1
MIT cgiemail1

معالجة

Official Fix116
Temporary Fix0
Workaround0
Unavailable1
Not Defined29

قابلية الاستغلال

High0
Functional0
Proof-of-Concept50
Unproven17
Not Defined79

متجه الوصول

Not Defined0
Physical0
Local12
Adjacent10
Network124

توثيق

Not Defined0
High0
Low43
None103

تفاعل المستخدم

Not Defined0
Required0
None146

C3BM Index

CVSSv3 Base

≤10
≤20
≤30
≤48
≤511
≤636
≤710
≤842
≤98
≤1031

CVSSv3 Temp

≤10
≤20
≤30
≤411
≤521
≤626
≤739
≤815
≤925
≤109

VulDB

≤10
≤20
≤30
≤49
≤513
≤633
≤711
≤843
≤96
≤1031

NVD

≤10
≤20
≤30
≤44
≤51
≤63
≤76
≤84
≤91
≤103

CNA

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

المجهز

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

إكسبلويت ذات هجوم فوري

<1k0
<2k0
<5k15
<10k43
<25k46
<50k41
<100k1
≥100k0

إكسبلويت اليوم

<1k121
<2k5
<5k11
<10k8
<25k1
<50k0
<100k0
≥100k0

حجم سوق الإكسبلويت

🔴 CTI النشاطات

Affected Products (7): Kerberos (123), Kerberos 5 (17), Lifelong Kindergarten Scratch scratch-vm (1), Multics (1), PGP Public Key Server (1), cgiemail (1), krb5-appl (2)

Link to Vendor Website: http://www.mit.edu/

منشورBaseTempالثغرةProdق�معالجةEPSSCTICVE
26/02/20243.53.4MIT Kerberos 5 k5sealv3.c الحرمان من الخدمةNetwork Authentication SoftwareNot DefinedNot Defined0.000430.02CVE-2024-26461
26/02/20243.53.4MIT Kerberos 5 pmap_rmt.c الحرمان من الخدمةNetwork Authentication SoftwareNot DefinedNot Defined0.000430.04CVE-2024-26458
26/02/20243.53.4MIT Kerberos 5 ndr.c الحرمان من الخدمةNetwork Authentication SoftwareNot DefinedNot Defined0.000430.04CVE-2024-26462
16/08/20237.17.0MIT Kerberos 5 do_tgs_req.c تجاوز الصلاحياتNetwork Authentication SoftwareNot DefinedOfficial Fix0.000990.06CVE-2023-39975
08/08/20235.45.3MIT Kerberos 5 kadmind kadm_rpc_xdr.c _xdr_kadm5_principal_ent_rec الحرمان من الخدمةNetwork Authentication SoftwareNot DefinedOfficial Fix0.002670.00CVE-2023-36054
23/08/20213.53.4MIT Kerberos 5 Key Distribution Center do_tgs_req.c الحرمان من الخدمةNetwork Authentication SoftwareNot DefinedOfficial Fix0.002680.00CVE-2021-37750
23/07/20214.34.1MIT Kerberos 5 Key Distribution Center kdc_preauth_ec.c ec_verify الحرمان من الخدمةNetwork Authentication SoftwareNot DefinedOfficial Fix0.006160.00CVE-2021-36222
02/02/20216.56.5MIT krb5-appl rcp Client تجاوز الصلاحياتغير معروفNot DefinedOfficial Fix0.001020.00CVE-2019-25018
02/02/20215.75.7MIT krb5-appl rcp اجتياز الدليلغير معروفNot DefinedOfficial Fix0.000700.00CVE-2019-25017
06/11/20205.55.3MIT Kerberos 5 ASN.1 asn1_encode.c الحرمان من الخدمةNetwork Authentication SoftwareNot DefinedOfficial Fix0.005200.00CVE-2020-28196
16/07/20208.57.5MIT Lifelong Kindergarten Scratch scratch-vm sb3.js تجاوز الصلاحياتغير معروفNot DefinedOfficial Fix0.028260.00CVE-2020-14000
26/12/20185.15.0MIT Kerberos تجاوز الصلاحياتNetwork Authentication SoftwareNot DefinedOfficial Fix0.003030.00CVE-2018-20217
06/03/20185.14.9MIT Kerberos 5 kadmin تجاوز الصلاحياتNetwork Authentication SoftwareNot DefinedOfficial Fix0.001550.04CVE-2018-5730
06/03/20184.54.4MIT Kerberos 5 kadmin الحرمان من الخدمةNetwork Authentication SoftwareNot DefinedOfficial Fix0.002080.00CVE-2018-5729
16/01/20185.45.4MIT Kerberos 5 Key Distribution Center ldap_principal2.c الحرمان من الخدمةNetwork Authentication SoftwareNot DefinedNot Defined0.001570.00CVE-2018-5710
16/01/20187.47.4MIT Kerberos 5 dump.c تلف الذاكرةNetwork Authentication SoftwareNot DefinedNot Defined0.000970.03CVE-2018-5709
23/11/20178.58.4MIT Kerberos 5 X.509 Data pkinit_crypto_openssl.c X509_NAME_oneline_ex تلف الذاكرةNetwork Authentication SoftwareNot DefinedOfficial Fix0.020550.00CVE-2017-15088
13/09/20179.69.4MIT Kerberos 5 تلف الذاكرةNetwork Authentication SoftwareNot DefinedOfficial Fix0.006000.03CVE-2017-11462
09/08/20176.56.3MIT Kerberos 5 KDC Assertion تجاوز الصلاحياتNetwork Authentication SoftwareNot DefinedOfficial Fix0.002080.00CVE-2017-11368
20/07/20166.56.3MIT Kerberos 5 KDC Service validate_as_request الحرمان من الخدمةNetwork Authentication SoftwareNot DefinedOfficial Fix0.048880.02CVE-2016-3120
26/03/20165.34.9MIT Kerberos kadmin ldap_principal2.c process_db_args الحرمان من الخدمةNetwork Authentication SoftwareUnprovenOfficial Fix0.070990.03CVE-2016-3119
03/02/20164.84.4MIT Kerberos xdr_nullstring تلف الذاكرةNetwork Authentication SoftwareUnprovenOfficial Fix0.007310.00CVE-2015-8629
03/02/20167.57.0MIT Kerberos kadmin kadm5_modify_principal الحرمان من الخدمةNetwork Authentication SoftwareUnprovenOfficial Fix0.073170.00CVE-2015-8630
03/02/20166.56.1MIT Kerberos rb5_unparse_name تلف الذاكرةNetwork Authentication SoftwareUnprovenOfficial Fix0.064040.04CVE-2015-8631
13/11/20156.36.0MIT Kerberos iakerb.c gss_export_sec_context تلف الذاكرةNetwork Authentication SoftwareNot DefinedOfficial Fix0.007200.04CVE-2015-2698

121 بعض الادخالات لم يتم عرضها

Interested in the pricing of exploits?

See the underground prices here!