PT-2005-2190
CVE-2005-1174
·
تاريخ النشر
2005-07-12
·
تاريخ التحديث
2020-01-21
الوصف من
CVSS 2.0
5.0
متوسطةالمقاييسAV:N/AC:L/Au:N/C:N/I:N/A:P
Name of the Vulnerable Software and Affected Versions
MIT Kerberos 5 (krb5) versions 1.3 through 1.4.1
Description
The issue allows remote attackers to cause a denial of service, resulting in an application crash. This is achieved through a certain valid TCP connection that causes a free of unallocated memory.
Recommendations
For versions 1.3 through 1.4.1, consider restricting access to the Key Distribution Center (KDC) to minimize the risk of exploitation until a patch is available.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾