CVE-2009-0847

EPSS 20.3%

發布日:2009/4/9修改日:2026/4/28

也稱為:DEBIAN-CVE-2009-0847

描述

The asn1buf_imbed function in the ASN.1 decoder in MIT Kerberos 5 (aka krb5) 1.6.3, when PK-INIT is used, allows remote attackers to cause a denial of service (application crash) via a crafted length value that triggers an erroneous malloc call, related to incorrect calculations with pointer arithmetic.

受影響套件(1)

Debian/krb5from 0, < 1.6.dfsg.4~beta1-13

參考連結(1)

ADVISORYhttps://security-tracker.debian.org/tracker/CVE-2009-0847