3 kerberos security issues

Alexander Bergmann via Kerberos <[email protected]> Fri, 1 Mar 2024 13:13:05 +0100

Newsgroups	gmane.comp.encryption.kerberos.general
Message-ID	<20240301121305.s76fxuoesmnupbuw@castor>

Hi everyone,

We got notified via NVD about 3 new security issues. Right now there
seams to be no upstream reference. Could someone please comment on this? 

CVE-2024-26458: Memory leak at /krb5/src/lib/rpc/pmap_rmt.c
CVE-2024-26461: Memory leak at /krb5/src/lib/gssapi/krb5/k5sealv3.c
CVE-2024-26462: Memory leak at /krb5/src/kdc/ndr.c

References:
https://nvd.nist.gov/vuln/detail/CVE-2024-26458
https://nvd.nist.gov/vuln/detail/CVE-2024-26461
https://nvd.nist.gov/vuln/detail/CVE-2024-26462



Thanks,
Alex~

-- 
Alexander Bergmann <[email protected]>
Security Engineer, GPG: E30A 65A4 0F50 0066 B2B5  F614 DE54 E875 9FFA 4886
SUSE Software Solutions Germany GmbH
Frankenstr. 146, 90461 Nuernberg, Germany
Managing Director/Geschäftsführer: Ivo Totev, Andrew McDonald, Werner Knoblich
(HRB 36809, AG Nürnberg)

________________________________________________
Kerberos mailing list           [email protected]
https://mailman.mit.edu/mailman/listinfo/kerberos

signature.asc (application/pgp-signature, 488 B)