CVE-2009-0844

EPSS 3.4%

krb5 - several vulnerabilities

發布日:2009/4/9修改日:2026/4/28

也稱為:DEBIAN-CVE-2009-0844

描述

The get_input_token function in the SPNEGO implementation in MIT Kerberos 5 (aka krb5) 1.5 through 1.6.3 allows remote attackers to cause a denial of service (daemon crash) and possibly obtain sensitive information via a crafted length value that triggers a buffer over-read.

受影響套件(2)

Debian/krb5from 0, < 1.6.dfsg.4~beta1-13
Debian/krb5from 0, < 1.4.4-7etch7

參考連結(1)

ADVISORYhttps://security-tracker.debian.org/tracker/CVE-2009-0844