Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
oraclelinuxOracleLinuxELSA-2024-6166
HistorySep 03, 2024 - 12:00 a.m.

krb5 security update

2024-09-0300:00:00
linux.oracle.com
21
krb5
security update
race condition
cve-2024

CVSS3

9.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

AI Score

7.5

Confidence

Low

JSON

[1.21.1-2.0.1]

  • Fixed race condition in krb5_set_password() [Orabug: 33609767]
    [1.21.1-2]
  • CVE-2024-37370 CVE-2024-37371
    Fix vulnerabilities in GSS message token handling
    Resolves: RHEL-45401 RHEL-45390
OSVersionArchitecturePackageVersionFilename
oracle linux9srckrb5< 1.21.1-2.0.1.el9_4krb5-1.21.1-2.0.1.el9_4.src.rpm
oracle linux9srckrb5< 1.21.1-2.0.1.el9_4krb5-1.21.1-2.0.1.el9_4.src.rpm
oracle linux9srckrb5< 1.21.1-2.0.1.el9_4krb5-1.21.1-2.0.1.el9_4.src.rpm
oracle linux9aarch64krb5-devel< 1.21.1-2.0.1.el9_4krb5-devel-1.21.1-2.0.1.el9_4.aarch64.rpm
oracle linux9aarch64krb5-libs< 1.21.1-2.0.1.el9_4krb5-libs-1.21.1-2.0.1.el9_4.aarch64.rpm
oracle linux9aarch64krb5-libs< 1.21.1-2.0.1.el9_4krb5-libs-1.21.1-2.0.1.el9_4.aarch64.rpm
oracle linux9aarch64krb5-pkinit< 1.21.1-2.0.1.el9_4krb5-pkinit-1.21.1-2.0.1.el9_4.aarch64.rpm
oracle linux9aarch64krb5-pkinit< 1.21.1-2.0.1.el9_4krb5-pkinit-1.21.1-2.0.1.el9_4.aarch64.rpm
oracle linux9aarch64krb5-server< 1.21.1-2.0.1.el9_4krb5-server-1.21.1-2.0.1.el9_4.aarch64.rpm
oracle linux9aarch64krb5-server< 1.21.1-2.0.1.el9_4krb5-server-1.21.1-2.0.1.el9_4.aarch64.rpm
Rows per page:
1-10 of 431

Related

nessus 34
openvas 17
almalinux 2
redhat 13
ubuntucve 2
amazon 1
redos 1
oraclelinux 1
osv 6
ibm 2
ubuntu 1
mageia 1
photon 3
alpinelinux 2
cbl_mariner 4
veracode 2
fedora 2
nvd 2
vulnrichment 2
cvelist 2
debiancve 2
cve 2
redhatcve 2
nessus
nessus
RHEL 9 : krb5 (RHSA-2024:5643)
2024-08-20 00:00:00
RHEL 8 : krb5 (RHSA-2024:4734)
2024-07-23 00:00:00
EulerOS 2.0 SP10 : krb5 (EulerOS-SA-2024-2419)
2024-09-12 00:00:00
openvas
openvas
Debian: Security Advisory (DSA-5726-1)
2024-07-08 00:00:00
SUSE: Security Advisory (SUSE-SU-2024:2305-1)
2024-07-08 00:00:00
openSUSE: Security Advisory for krb5 (SUSE-SU-2024:2307-1)
2024-07-10 00:00:00
almalinux
almalinux
Moderate: krb5 security update
2024-08-13 00:00:00
Moderate: krb5 security update
2024-09-03 00:00:00
redhat
redhat
(RHSA-2024:5076) Moderate: krb5 security update
2024-08-07 09:57:22
(RHSA-2024:4734) Moderate: krb5 security update
2024-07-23 14:41:35
(RHSA-2024:5884) Moderate: krb5 security update
2024-08-27 07:29:05
ubuntucve
ubuntucve
CVE-2024-37371
2024-06-28 00:00:00
CVE-2024-37370
2024-06-28 00:00:00
amazon
amazon
Medium: krb5
2024-07-18 02:00:00
redos
redos
ROS-20240911-04
2024-09-11 00:00:00
oraclelinux
oraclelinux
krb5 security update
2024-08-13 00:00:00
osv
osv
krb5 - security update
2024-07-05 00:00:00
Moderate: krb5 security update
2024-09-03 00:00:00
Moderate: krb5 security update
2024-08-13 00:00:00
ibm
ibm
Security Bulletin: IBM DataPower Gateway vulnerable to data truncation and DoS in Kerberos (CVE-2024-37370 & CVE-2024-37371)
2024-09-03 14:18:56
Security Bulletin: IBM MQ Operator and Queue manager container images are vulnerable to denial of service, privilege escalation and kerberos 5
2024-09-06 09:28:18
ubuntu
ubuntu
Kerberos vulnerabilities
2024-08-08 00:00:00
mageia
mageia
Updated krb5 packages fix security vulnerabilities
2024-07-03 19:36:28
photon
photon
Critical Photon OS Security Update - PHSA-2024-4.0-0679
2024-09-02 00:00:00
Critical Photon OS Security Update - PHSA-2024-3.0-0791
2024-09-04 00:00:00
Critical Photon OS Security Update - PHSA-2024-5.0-0355
2024-08-26 00:00:00
alpinelinux
alpinelinux
CVE-2024-37371
2024-06-28 23:15:11
CVE-2024-37370
2024-06-28 22:15:02
cbl_mariner
cbl_mariner
CVE-2024-37371 affecting package krb5 for versions less than 1.21.3-1
2024-08-05 03:22:58
CVE-2024-37370 affecting package krb5 for versions less than 1.21.3-1
2024-08-05 03:22:58
CVE-2024-37370 affecting package krb5 for versions less than 1.21.3-1
2024-08-14 20:43:58
veracode
veracode
Plaintext Modification
2024-07-01 11:00:24
Denial Of Service (DoS)
2024-07-01 11:46:03
fedora
fedora
[SECURITY] Fedora 40 Update: krb5-1.21.3-1.fc40
2024-07-13 02:46:57
[SECURITY] Fedora 39 Update: krb5-1.21.3-1.fc39
2024-07-17 01:19:01
nvd
nvd
CVE-2024-37370
2024-06-28 22:15:02
CVE-2024-37371
2024-06-28 23:15:11
vulnrichment
vulnrichment
CVE-2024-37370
2024-06-28 00:00:00
CVE-2024-37371
2024-06-28 00:00:00
cvelist
cvelist
CVE-2024-37371
2024-06-28 00:00:00
CVE-2024-37370
2024-06-28 00:00:00
debiancve
debiancve
CVE-2024-37371
2024-06-28 23:15:11
CVE-2024-37370
2024-06-28 22:15:02
cve
cve
CVE-2024-37370
2024-06-28 22:15:02
CVE-2024-37371
2024-06-28 23:15:11
redhatcve
redhatcve
CVE-2024-37370
2024-06-28 05:08:57
CVE-2024-37371
2024-06-28 05:08:51

CVSS3

9.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

AI Score

7.5

Confidence

Low

JSON
Related for ELSA-2024-6166
nessus34openvas17almalinux2redhat13ubuntucve2amazon1redos1oraclelinux1osv6ibm2ubuntu1mageia1photon3alpinelinux2cbl_mariner4veracode2fedora2nvd2vulnrichment2cvelist2debiancve2cve2redhatcve2