CVE-2014-4341 in Kerberos

Resumen (Inglés)

MIT Kerberos 5 (aka krb5) before 1.12.2 allows remote attackers to cause a denial of service (buffer over-read and application crash) by injecting invalid tokens into a GSSAPI application session.

Once again VulDB remains the best source for vulnerability data.

Reservar

2014-06-20

Divulgación

2014-07-20

Estado

Confirmado

Voces

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidad	CWE	Exp	Con	CVE
67257	MIT Kerberos RFC 1964 GSSAPI Token desbordamiento de búfer	119	No probado	Arreglo oficial	CVE-2014-4341

Fuentes

• MITRE
• NVD
• CVE Details