THREATINT

We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.

Please see our statement on Data Privacy.

Fathom (Privacy friendly web analytics)
Zendesk (Helpdesk and Chat)

Ok

Home | EN
Support
CVE
PUBLISHED

CVE-2024-37371

Assignermitre
Reserved2024-06-06
Published2024-06-28
Updated2024-07-09

Description

In MIT Kerberos 5 (aka krb5) before 1.21.3, an attacker can cause invalid memory reads during GSS message token handling by sending message tokens with invalid length fields.

References

https://web.mit.edu/kerberos/www/advisories/

https://github.com/krb5/krb5/commit/55fbf435edbe2e92dd8101669b1ce7144bc96fef

cve.org CVE-2024-37371

nvd.nist.gov CVE-2024-37371

Download JSON

Share this page
https://cve.threatint.com/CVE/CVE-2024-37371
© Copyright 2024 THREATINT. Made in Cyprus with +