pkg:Alpine/krb5

All known vulnerabilities

• CRITICAL9.8CVE-2017-15088plugins/preauth/pkinit/pkinit_crypto_openssl.c in MIT Kerberos 5 (aka krb5) through 1.15.2 mishandles Distinguished Name (DN) fields, which…
  from 0, < 1.15.3-r0
• CRITICAL9.1CVE-2024-37371In MIT Kerberos 5 (aka krb5) before 1.21.3, an attacker can cause invalid memory reads during GSS message token handling by sending message…
  from 0, < 1.20.2-r1
• HIGH8.8CVE-2022-42898krb5 - security update
  from 0, < 1.19.4-r0
• HIGH7.5krb5 - security update
  from 0, < 1.20.2-r1
• HIGH7.5krb5 - security update
  from 0, < 1.18.4-r0
• HIGH7.5krb5 - security update
  from 0, < 1.17.2-r0
• HIGH7.5An issue was discovered in MIT Kerberos 5 (aka krb5) through 1.16.
  from 0, < 1.15.3-r0
• HIGH7.5The (1) kadm5_create_principal_3 and (2) kadm5_modify_principal functions in lib/kadm5/srv/svr_principal.c in kadmind in MIT Kerberos 5 (ak…
  from 0, < 1.14-r1
• MEDIUM6.5krb5 - security update
  from 0, < 1.20.2-r0
• MEDIUM6.5The Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.18.5 and 1.19.x before 1.19.3 has a NULL pointer dereference in kdc…
  from 0, < 1.18.5-r0
• MEDIUM6.5An issue was discovered in MIT Kerberos 5 (aka krb5) through 1.16.
  from 0, < 1.15.3-r0
• MEDIUM6.5The validate_as_request function in kdc_util.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.13.6 and 1.4.x be…
  from 0, < 1.13.6-r0
• MEDIUM6.5Multiple memory leaks in kadmin/server/server_stubs.c in kadmind in MIT Kerberos 5 (aka krb5) before 1.13.4 and 1.14.x before 1.14.1 allow…
  from 0, < 1.14-r1
• MEDIUM5.3krb5 - security update
  from 0, < 1.15.4-r0
• MEDIUM5.3The process_db_args function in plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c in the LDAP KDB module in kadmind in MIT Kerberos 5 (aka krb…
  from 0, < 1.14-r2
• MEDIUM5.3krb5 - security update
  from 0, < 1.14-r1