Mit Kerberos 漏洞

时间轴

去年

版本

5-1.8	22
5-1.5	20
5-1.6	19
5-1.4	19
5-1.7	18

修正

Official Fix	112
Temporary Fix	0
Workaround	0
Unavailable	0
Not Defined	28

易受攻击性

High	0
Functional	0
Proof-of-Concept	48
Unproven	17
Not Defined	75

访问向量

Not Defined	0
Physical	0
Local	11
Adjacent	8
Network	121

身份验证

Not Defined	0
High	0
Low	41
None	99

用户交互

Not Defined	0
Required	0
None	140

CVSSv3 Base

≤1	0
≤2	0
≤3	0
≤4	8
≤5	11
≤6	35
≤7	9
≤8	39
≤9	7
≤10	31

CVSSv3 Temp

≤1	0
≤2	0
≤3	0
≤4	11
≤5	21
≤6	25
≤7	35
≤8	14
≤9	25
≤10	9

VulDB

≤1	0
≤2	0
≤3	0
≤4	9
≤5	13
≤6	31
≤7	11
≤8	39
≤9	6
≤10	31

NVD

≤1	0
≤2	0
≤3	0
≤4	4
≤5	1
≤6	2
≤7	6
≤8	3
≤9	1
≤10	2

CNA

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

供应商

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Research

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

零日攻击

<1k	0
<2k	0
<5k	15
<10k	42
<25k	43
<50k	39
<100k	1
≥100k	0

本日攻击

<1k	120
<2k	1
<5k	12
<10k	5
<25k	2
<50k	0
<100k	0
≥100k	0

Affected Versions (139): 1.0, 1.0.8, 1.0.8mit, 1.1, 1.2, 1.2.2.beta1, 1.3, 1.4, 1.5, 1.6, 1.6.3, 1.6.3 Kdc, 1.7, 1.8, 1.9, 1.10, 1.10.1, 1.10.2, 1.10.3, 1.10.4, 1.10.6, 1.11, 1.11.3, 1.12, 1.13, 1.13.1, 1.13.2, 1.13.3, 1.13.4, 1.14, 1.14.1, 1.14.2, 1.15, 1.15.1, 1.15.2, 1.16, 1.17, 1.17.1, 1.18, 1.18.1, 1.18.2, 1.18.3, 1.18.4, 1.19, 1.19.1, 1.19.2, 1.20, 1.20.1, 1.21, 1.21.1, 1.21.2, 4, 4.0, 5, 5 1.0, 5 1.0.6, 5 1.1, 5 1.1.1, 5 1.2, 5 1.3.3, 5 1.13, 5-1.0, 5-1.1, 5-1.2, 5-1.2.1, 5-1.2.2, 5-1.2.3, 5-1.2.4, 5-1.2.5, 5-1.2.6, 5-1.2.7, 5-1.2.8, 5-1.3, 5-1.3.1, 5-1.3.2, 5-1.3.3, 5-1.3.4, 5-1.3.5, 5-1.3.6, 5-1.4, 5-1.4.1, 5-1.4.2, 5-1.4.3, 5-1.4.4, 5-1.5, 5-1.5.1, 5-1.5.2, 5-1.5.3, 5-1.5.4, 5-1.6, 5-1.6.1, 5-1.6.2, 5-1.6.3, 5-1.7, 5-1.7.1, 5-1.8, 5-1.8.1, 5-1.8.2, 5-1.8.3, 5-1.8.4, 5-1.8.5, 5-1.8.6, 5-1.9, 5-1.9.1, 5-1.9.2, 5-1.9.3, 5-1.9.4, 5-1.10, 5-1.10.1, 5-1.10.2, 5-1.10.3, 5-1.10.4, 5-1.10.5, 5-1.10.6, 5-1.10.7, 5-1.11, 5-1.11.1, 5-1.11.2, 5-1.11.3, 5-1.11.4, 5-1.11.5, 5-1.12, 5-1.12.1, 5-1.12.2, 5-1.13, 5-1.13.1, 5-1.14, 5-appl 1.0.1, 5.1, 5.1.1, 5.1.2, 5.1.3, 5.1.4, 5.1.5, 5.1.6, 5.1.7, 5.1.8, 5.1.9, 5.18

Link to Product Website: http://www.mit.edu/

软件类型: Network Authentication Software

已发布	Base	Temp	漏洞	0day	今天	易	修正	CTI	CVE
2024-02-26	3.5	3.4	MIT Kerberos 5 k5sealv3.c 拒绝服务	$5k-$25k	$0-$5k	Not Defined	Not Defined	0.02	CVE-2024-26461
2024-02-26	3.5	3.4	MIT Kerberos 5 pmap_rmt.c 拒绝服务	$5k-$25k	$0-$5k	Not Defined	Not Defined	0.05	CVE-2024-26458
2024-02-26	3.5	3.4	MIT Kerberos 5 ndr.c 拒绝服务	$5k-$25k	$0-$5k	Not Defined	Not Defined	0.04	CVE-2024-26462
2023-08-16	7.1	7.0	MIT Kerberos 5 do_tgs_req.c 权限升级	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.06	CVE-2023-39975
2023-08-08	5.4	5.3	MIT Kerberos 5 kadmind kadm_rpc_xdr.c _xdr_kadm5_principal_ent_rec 拒绝服务	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2023-36054
2021-08-23	3.5	3.4	MIT Kerberos 5 Key Distribution Center do_tgs_req.c 拒绝服务	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2021-37750
2021-07-23	4.3	4.1	MIT Kerberos 5 Key Distribution Center kdc_preauth_ec.c ec_verify 拒绝服务	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2021-36222
2020-11-06	5.5	5.3	MIT Kerberos 5 ASN.1 asn1_encode.c 拒绝服务	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2020-28196
2018-12-26	5.1	5.0	MIT Kerberos 权限升级	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2018-20217
2018-03-06	5.1	4.9	MIT Kerberos 5 kadmin 权限升级	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.05	CVE-2018-5730
2018-03-06	4.5	4.4	MIT Kerberos 5 kadmin 拒绝服务	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2018-5729
2018-01-16	5.4	5.4	MIT Kerberos 5 Key Distribution Center ldap_principal2.c 拒绝服务	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2018-5710
2018-01-16	7.4	7.4	MIT Kerberos 5 dump.c 内存损坏	$5k-$25k	$5k-$25k	Not Defined	Not Defined	0.00	CVE-2018-5709
2017-11-23	8.5	8.4	MIT Kerberos 5 X.509 Data pkinit_crypto_openssl.c X509_NAME_oneline_ex 内存损坏	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2017-15088
2017-09-13	9.6	9.4	MIT Kerberos 5 内存损坏	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.03	CVE-2017-11462
2017-08-09	6.5	6.3	MIT Kerberos 5 KDC Assertion 权限升级	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2017-11368
2016-07-20	6.5	6.3	MIT Kerberos 5 KDC Service validate_as_request 拒绝服务	$0-$5k	$0-$5k	Not Defined	Official Fix	0.02	CVE-2016-3120
2016-03-26	5.3	4.9	MIT Kerberos kadmin ldap_principal2.c process_db_args 拒绝服务	$0-$5k	$0-$5k	Unproven	Official Fix	0.03	CVE-2016-3119
2016-02-03	4.8	4.4	MIT Kerberos xdr_nullstring 内存损坏	$5k-$25k	$0-$5k	Unproven	Official Fix	0.00	CVE-2015-8629
2016-02-03	7.5	7.0	MIT Kerberos kadmin kadm5_modify_principal 拒绝服务	$5k-$25k	$0-$5k	Unproven	Official Fix	0.00	CVE-2015-8630
2016-02-03	6.5	6.1	MIT Kerberos rb5_unparse_name 内存损坏	$5k-$25k	$0-$5k	Unproven	Official Fix	0.04	CVE-2015-8631
2015-11-13	6.3	6.0	MIT Kerberos iakerb.c gss_export_sec_context 内存损坏	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.04	CVE-2015-2698
2015-10-26	4.3	4.1	MIT Kerberos TGS Request bld_princ.c 内存损坏	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2015-2697
2015-10-26	5.3	5.1	MIT Kerberos IAKERB gss_inquire_context 拒绝服务	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.02	CVE-2015-2696
2015-10-26	5.3	5.1	MIT Kerberos GSS-API Library gss_inquire_context 拒绝服务	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2015-2695

Mit Kerberos 漏洞

时间轴

去年

版本

修正

易受攻击性

访问向量

身份验证

用户交互

C3BM Index

去年

CVSSv3 Base

CVSSv3 Temp

VulDB

NVD

CNA

供应商

Research

零日攻击

本日攻击

攻击市场容量

去年

🔴 CTI 活动

🔒 Login Required

Are you interested in using VulDB?