Mit Vulnerabilidades

Curso de tempo

Tipo

Network Authentication Software140
Not Defined6

Produto

MIT Kerberos123
MIT Kerberos 517
MIT krb5-appl2
MIT Lifelong Kindergarten Scratch scratch-vm1
MIT cgiemail1

Medidas

Official Fix116
Temporary Fix0
Workaround0
Unavailable1
Not Defined29

Explorabilidade

High0
Functional0
Proof-of-Concept50
Unproven17
Not Defined79

Tipo de acesso

Not Defined0
Physical0
Local12
Adjacent10
Network124

Autenticação

Not Defined0
High0
Low43
None103

Actividade do utilizador

Not Defined0
Required0
None146

C3BM Index

CVSSv3 Base

≤10
≤20
≤30
≤48
≤511
≤636
≤710
≤842
≤98
≤1031

CVSSv3 Temp

≤10
≤20
≤30
≤411
≤521
≤626
≤739
≤815
≤925
≤109

VulDB

≤10
≤20
≤30
≤49
≤513
≤633
≤711
≤843
≤96
≤1031

NVD

≤10
≤20
≤30
≤44
≤51
≤63
≤76
≤84
≤91
≤103

CNA

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Fabricante

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Explorar 0 dia

<1k0
<2k0
<5k15
<10k43
<25k46
<50k41
<100k1
≥100k0

Explorar hoje

<1k122
<2k4
<5k11
<10k8
<25k1
<50k0
<100k0
≥100k0

Explorar o volume do mercado

🔴 CTI Actividades

Affected Products (7): Kerberos (123), Kerberos 5 (17), Lifelong Kindergarten Scratch scratch-vm (1), Multics (1), PGP Public Key Server (1), cgiemail (1), krb5-appl (2)

Link to Vendor Website: http://www.mit.edu/

Publicado emBaseTempVulnerabilidadeProdExpMasEPSSCTICVE
26/02/20243.53.4MIT Kerberos 5 k5sealv3.c Negação de ServiçoNetwork Authentication SoftwareNot DefinedNot Defined0.000430.02CVE-2024-26461
26/02/20243.53.4MIT Kerberos 5 pmap_rmt.c Negação de ServiçoNetwork Authentication SoftwareNot DefinedNot Defined0.000430.02CVE-2024-26458
26/02/20243.53.4MIT Kerberos 5 ndr.c Negação de ServiçoNetwork Authentication SoftwareNot DefinedNot Defined0.000430.04CVE-2024-26462
16/08/20237.17.0MIT Kerberos 5 do_tgs_req.c direitos alargadosNetwork Authentication SoftwareNot DefinedOfficial Fix0.000990.06CVE-2023-39975
08/08/20235.45.3MIT Kerberos 5 kadmind kadm_rpc_xdr.c _xdr_kadm5_principal_ent_rec Negação de ServiçoNetwork Authentication SoftwareNot DefinedOfficial Fix0.002670.00CVE-2023-36054
23/08/20213.53.4MIT Kerberos 5 Key Distribution Center do_tgs_req.c Negação de ServiçoNetwork Authentication SoftwareNot DefinedOfficial Fix0.002680.00CVE-2021-37750
23/07/20214.34.1MIT Kerberos 5 Key Distribution Center kdc_preauth_ec.c ec_verify Negação de ServiçoNetwork Authentication SoftwareNot DefinedOfficial Fix0.006160.00CVE-2021-36222
02/02/20216.56.5MIT krb5-appl rcp Client direitos alargadosDesconhecidoNot DefinedOfficial Fix0.001020.00CVE-2019-25018
02/02/20215.75.7MIT krb5-appl rcp Directório TraversalDesconhecidoNot DefinedOfficial Fix0.000700.00CVE-2019-25017
06/11/20205.55.3MIT Kerberos 5 ASN.1 asn1_encode.c Negação de ServiçoNetwork Authentication SoftwareNot DefinedOfficial Fix0.005200.00CVE-2020-28196
16/07/20208.57.5MIT Lifelong Kindergarten Scratch scratch-vm sb3.js direitos alargadosDesconhecidoNot DefinedOfficial Fix0.028260.00CVE-2020-14000
26/12/20185.15.0MIT Kerberos direitos alargadosNetwork Authentication SoftwareNot DefinedOfficial Fix0.003030.00CVE-2018-20217
06/03/20185.14.9MIT Kerberos 5 kadmin direitos alargadosNetwork Authentication SoftwareNot DefinedOfficial Fix0.001550.03CVE-2018-5730
06/03/20184.54.4MIT Kerberos 5 kadmin Negação de ServiçoNetwork Authentication SoftwareNot DefinedOfficial Fix0.002080.00CVE-2018-5729
16/01/20185.45.4MIT Kerberos 5 Key Distribution Center ldap_principal2.c Negação de ServiçoNetwork Authentication SoftwareNot DefinedNot Defined0.001570.00CVE-2018-5710
16/01/20187.47.4MIT Kerberos 5 dump.c Excesso de tampãoNetwork Authentication SoftwareNot DefinedNot Defined0.000970.03CVE-2018-5709
23/11/20178.58.4MIT Kerberos 5 X.509 Data pkinit_crypto_openssl.c X509_NAME_oneline_ex Excesso de tampãoNetwork Authentication SoftwareNot DefinedOfficial Fix0.020550.00CVE-2017-15088
13/09/20179.69.4MIT Kerberos 5 Excesso de tampãoNetwork Authentication SoftwareNot DefinedOfficial Fix0.006000.03CVE-2017-11462
09/08/20176.56.3MIT Kerberos 5 KDC Assertion direitos alargadosNetwork Authentication SoftwareNot DefinedOfficial Fix0.002080.00CVE-2017-11368
20/07/20166.56.3MIT Kerberos 5 KDC Service validate_as_request Negação de ServiçoNetwork Authentication SoftwareNot DefinedOfficial Fix0.048880.02CVE-2016-3120
26/03/20165.34.9MIT Kerberos kadmin ldap_principal2.c process_db_args Negação de ServiçoNetwork Authentication SoftwareUnprovenOfficial Fix0.070990.03CVE-2016-3119
03/02/20164.84.4MIT Kerberos xdr_nullstring Excesso de tampãoNetwork Authentication SoftwareUnprovenOfficial Fix0.007310.00CVE-2015-8629
03/02/20167.57.0MIT Kerberos kadmin kadm5_modify_principal Negação de ServiçoNetwork Authentication SoftwareUnprovenOfficial Fix0.073170.00CVE-2015-8630
03/02/20166.56.1MIT Kerberos rb5_unparse_name Excesso de tampãoNetwork Authentication SoftwareUnprovenOfficial Fix0.064040.00CVE-2015-8631
13/11/20156.36.0MIT Kerberos iakerb.c gss_export_sec_context Excesso de tampãoNetwork Authentication SoftwareNot DefinedOfficial Fix0.007200.03CVE-2015-2698

121 as entradas adicionais não são mais exibidas

🔒 Login Required

You need to signup and login to see more of the remaining 121 results.

◂ VoltarVisão GeralPróximo ▸

Do you know our Splunk app?

Download it now for free!