İçeriğe atla
Noroxi

heimdal project kayıtları

heimdal project üreticisine ait 13 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
1 · %7,7
Pre-auth RCE
3
Düzeltme kaydı olan
%92,3
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 17
  2. 19
  3. 22
  4. 23

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

13 kayıt
  • CVE-2011-4862
    69Bu hafta

    Buffer overflow in libtelnet/encrypt.c in telnetd in FreeBSD 7.3 through 9.0, MIT Kerberos Version 5 Applications (aka krb5-appl) 1.0.2 and

    KritikCVSS 10,0SilahlaştırılmışEPSS %95

    mit · krb5-appl24 Ara 2011

  • CVE-2004-0434
    41Planlayın

    k5admind (kadmind) for Heimdal allows remote attackers to execute arbitrary code via a Kerberos 4 compatibility administration request whose

    KritikCVSS 9,8İstismar yokEPSS %7

    heimdal project · heimdal7 Tem 2004

  • CVE-2022-44640
    40Planlayın

    Heimdal before 7.7.1 allows remote attackers to execute arbitrary code because of an invalid free in the ASN.1 codec used by the Key Distrib

    KritikCVSS 9,8İstismar yokEPSS %2

    heimdal project · heimdal25 Ara 2022

  • CVE-2022-42898
    37İzleyin

    PAC parsing in MIT Kerberos 5 (aka krb5) before 1.19.4 and 1.20.x before 1.20.1 has integer overflows that may lead to remote code execution

    YüksekCVSS 8,8İstismar yokEPSS %6

    mit · kerberos 525 Ara 2022

  • CVE-2017-11103
    34İzleyin

    Heimdal before 7.4 allows remote attackers to impersonate services with Orpheus' Lyre attacks because it obtains service-principal names in

    YüksekCVSS 8,1İstismar yokEPSS %5

    heimdal project · heimdal13 Tem 2017

  • CVE-2017-17439
    31İzleyin

    In Heimdal through 7.4, remote unauthenticated attackers are able to crash the KDC by sending a crafted UDP packet containing empty data fie

    YüksekCVSS 7,5İstismar yokEPSS %3

    debian · debian linux6 Ara 2017

  • CVE-2018-16860
    31İzleyin

    A flaw was found in samba's Heimdal KDC implementation, versions 4.8.x up to, excluding 4.8.12, 4.9.x up to, excluding 4.9.8 and 4.10.x up t

    YüksekCVSS 7,5İstismar yokEPSS %2

    samba · samba31 Tem 2019

  • CVE-2017-6594
    31İzleyin

    The transit path validation code in Heimdal before 7.3 might allow attackers to bypass the capath policy protection mechanism by leveraging

    YüksekCVSS 7,5İstismar yokEPSS %1

    heimdal project · heimdal28 Ağu 2017

  • CVE-2019-12098
    30İzleyin

    In the client side of Heimdal before 7.6.0, failure to verify anonymous PKINIT PA-PKINIT-KX key exchange permits a man-in-the-middle attack.

    YüksekCVSS 7,4İstismar yokEPSS %1

    heimdal project · heimdal15 May 2019

  • CVE-2021-44758
    30İzleyin

    Heimdal before 7.7.1 allows attackers to cause a NULL pointer dereference in a SPNEGO acceptor via a preferred_mech_type of GSS_C_NO_OID and

    YüksekCVSS 7,5İstismar yokEPSS %1

    heimdal project · heimdal26 Ara 2022

  • CVE-2022-41916
    30İzleyin

    Read one byte past a buffer when normalizing Unicode

    YüksekCVSS 7,5İstismar yokEPSS %0

    heimdal project · heimdal15 Kas 2022

  • CVE-2022-3116
    30İzleyin

    The Heimdal Software Kerberos 5 implementation is vulnerable to a null pointer dereferance.

    YüksekCVSS 7,5İstismar yokEPSS %0

    heimdal project · heimdal27 Mar 2023

  • CVE-2022-45142
    30İzleyin

    The fix for CVE-2022-3437 included changing memcmp to be constant time and a workaround for a compiler bug by adding "!= 0" comparisons to t

    YüksekCVSS 7,5İstismar yokEPSS %0

    heimdal project · heimdal6 Mar 2023