Schwachstellen / CVE-2024-37371

kritisch

CVE-2024-37371

krb5: GSS message token handling

Veröffentlicht Geändert CWE 125
In der Trivy Database seit spätestens 24. Okt. 2026, 07:11 UTCWann der Eintrag vor diesem Build hinzukam, ist nicht erfasst.

Einstufung nach Quelle

NVD9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Red Hat6.5CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Julia9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

Trivys eigenes Label ist CRITICAL. Kritisch laut NVD, Azure Linux, CBL-Mariner, Julia, Photon OS. Niedriger laut AlmaLinux (hoch), Oracle (hoch), Rocky Linux (hoch), Red Hat (mittel), Amazon (mittel), Ubuntu (mittel).

Beschreibung

In MIT Kerberos 5 (aka krb5) before 1.21.3, an attacker can cause invalid memory reads during GSS message token handling by sending message tokens with invalid length fields.

Betroffene Pakete und behobene Versionen

QuellePaketBehoben in
Azure Linux 3.0krb50:1.21.3-1.azl3
CBL-Mariner 2.0krb50:1.19.4-3.cm2
julia::Julia Ecosystem Security AdvisoriesKerberos_krb5_jll1.21.3+0
Photon OS 3.0krb51.17-7.ph3
Photon OS 4.0krb5, krb5-devel, krb5-lang1.17-12.ph4
Photon OS 5.0krb5, krb5-devel, krb5-doc und 1 weitere1.20.2-4.ph5
alma 8krb5-devel, krb5-libs, krb5-pkinit und 15 weitere1.18.2-29.el8_10 und 4 weitere
alma 9krb5-devel, krb5-libs, krb5-pkinit und 11 weitere1.21.1-2.el9_4 und 1 weitere
alpine 3.17krb51.20.2-r1
alpine 3.18krb51.20.2-r1
alpine 3.19krb51.20.3-r0
alpine 3.20krb51.20.3-r0
Alle 187 Einträge aus 47 Quellen zeigen
QuellePaketBehoben in
Azure Linux 3.0krb50:1.21.3-1.azl3
CBL-Mariner 2.0krb50:1.19.4-3.cm2
julia::Julia Ecosystem Security AdvisoriesKerberos_krb5_jll1.21.3+0
Photon OS 3.0krb51.17-7.ph3
Photon OS 4.0krb51.17-12.ph4
Photon OS 4.0krb5-devel1.17-12.ph4
Photon OS 4.0krb5-lang1.17-12.ph4
Photon OS 5.0krb51.20.2-4.ph5
Photon OS 5.0krb5-devel1.20.2-4.ph5
Photon OS 5.0krb5-doc1.20.2-4.ph5
Photon OS 5.0krb5-lang1.20.2-4.ph5
alma 8krb5-devel1.18.2-29.el8_10
alma 8krb5-libs1.18.2-29.el8_10
alma 8krb5-pkinit1.18.2-29.el8_10
alma 8krb5-server1.18.2-29.el8_10
alma 8krb5-server-ldap1.18.2-29.el8_10
alma 8krb5-workstation1.18.2-29.el8_10
alma 8libkadm51.18.2-29.el8_10
alma 8mysql:8.0::mecab0.996-2.module_el8.6.0+3340+d764b636
alma 8mysql:8.0::mecab-devel0.996-2.module_el8.10.0+3965+b415b607
alma 8mysql:8.0::mecab-ipadic2.7.0.20070801-17.module_el8.10.0+3965+b415b607
alma 8mysql:8.0::mecab-ipadic-EUCJP2.7.0.20070801-17.module_el8.10.0+3965+b415b607
alma 8mysql:8.0::mysql8.0.41-1.module_el8.10.0+3965+b415b607
alma 8mysql:8.0::mysql-common8.0.41-1.module_el8.10.0+3965+b415b607
alma 8mysql:8.0::mysql-devel8.0.41-1.module_el8.10.0+3965+b415b607
alma 8mysql:8.0::mysql-errmsg8.0.41-1.module_el8.10.0+3965+b415b607
alma 8mysql:8.0::mysql-libs8.0.41-1.module_el8.10.0+3965+b415b607
alma 8mysql:8.0::mysql-server8.0.41-1.module_el8.10.0+3965+b415b607
alma 8mysql:8.0::mysql-test8.0.41-1.module_el8.10.0+3965+b415b607
alma 9krb5-devel1.21.1-2.el9_4
alma 9krb5-libs1.21.1-2.el9_4
alma 9krb5-pkinit1.21.1-2.el9_4
alma 9krb5-server1.21.1-2.el9_4
alma 9krb5-server-ldap1.21.1-2.el9_4
alma 9krb5-workstation1.21.1-2.el9_4
alma 9libkadm51.21.1-2.el9_4
alma 9mysql8.0.41-2.el9_5
alma 9mysql-common8.0.41-2.el9_5
alma 9mysql-devel8.0.41-2.el9_5
alma 9mysql-errmsg8.0.41-2.el9_5
alma 9mysql-libs8.0.41-2.el9_5
alma 9mysql-server8.0.41-2.el9_5
alma 9mysql-test8.0.41-2.el9_5
alpine 3.17krb51.20.2-r1
alpine 3.18krb51.20.2-r1
alpine 3.19krb51.20.3-r0
alpine 3.20krb51.20.3-r0
alpine 3.21krb51.20.3-r0
alpine 3.22krb51.20.3-r0
alpine 3.23krb51.20.3-r0
alpine 3.24krb51.20.3-r0
alpine edgekrb51.20.3-r0
amazon linux 2krb5-debuginfo1.15.1-55.amzn2.2.8
amazon linux 2krb5-devel1.15.1-55.amzn2.2.8
amazon linux 2krb5-libs1.15.1-55.amzn2.2.8
amazon linux 2krb5-pkinit1.15.1-55.amzn2.2.8
amazon linux 2krb5-server1.15.1-55.amzn2.2.8
amazon linux 2krb5-server-ldap1.15.1-55.amzn2.2.8
amazon linux 2krb5-workstation1.15.1-55.amzn2.2.8
amazon linux 2libkadm51.15.1-55.amzn2.2.8
amazon linux 2023krb5-debuginfo1.21.3-1.amzn2023.0.1
amazon linux 2023krb5-debugsource1.21.3-1.amzn2023.0.1
amazon linux 2023krb5-devel1.21.3-1.amzn2023.0.1
amazon linux 2023krb5-libs1.21.3-1.amzn2023.0.1
amazon linux 2023krb5-libs-debuginfo1.21.3-1.amzn2023.0.1
amazon linux 2023krb5-pkinit1.21.3-1.amzn2023.0.1
amazon linux 2023krb5-pkinit-debuginfo1.21.3-1.amzn2023.0.1
amazon linux 2023krb5-server1.21.3-1.amzn2023.0.1
amazon linux 2023krb5-server-debuginfo1.21.3-1.amzn2023.0.1
amazon linux 2023krb5-server-ldap1.21.3-1.amzn2023.0.1
amazon linux 2023krb5-server-ldap-debuginfo1.21.3-1.amzn2023.0.1
amazon linux 2023krb5-workstation1.21.3-1.amzn2023.0.1
amazon linux 2023krb5-workstation-debuginfo1.21.3-1.amzn2023.0.1
amazon linux 2023libkadm51.21.3-1.amzn2023.0.1
amazon linux 2023libkadm5-debuginfo1.21.3-1.amzn2023.0.1
debian 11krb51.18.3-6+deb11u5
debian 12krb51.20.1-2+deb12u2
debian 13krb51.21.3-1
debian 14krb51.21.3-1
echokrb51.20.1-2+deb12u2
Oracle Linux 7krb5-devel1.15.1-55.0.3.el7_9
Oracle Linux 7krb5-libs1.15.1-55.0.3.el7_9
Oracle Linux 7krb5-pkinit1.15.1-55.0.3.el7_9
Oracle Linux 7krb5-server1.15.1-55.0.3.el7_9
Oracle Linux 7krb5-server-ldap1.15.1-55.0.3.el7_9
Oracle Linux 7krb5-workstation1.15.1-55.0.3.el7_9
Oracle Linux 7libkadm51.15.1-55.0.3.el7_9
Oracle Linux 8krb5-devel1.18.2-29.0.1.el8_10
Oracle Linux 8krb5-libs1.18.2-29.0.1.el8_10
Oracle Linux 8krb5-pkinit1.18.2-29.0.1.el8_10
Oracle Linux 8krb5-server1.18.2-29.0.1.el8_10
Oracle Linux 8krb5-server-ldap1.18.2-29.0.1.el8_10
Oracle Linux 8krb5-workstation1.18.2-29.0.1.el8_10
Oracle Linux 8libkadm51.18.2-29.0.1.el8_10
Oracle Linux 8mecab0.996-2.module+el8.10.0+90521+d5cc5c65
Oracle Linux 8mecab-devel0.996-2.module+el8.10.0+90521+d5cc5c65
Oracle Linux 8mecab-ipadic2.7.0.20070801-17.0.1.module+el8.10.0+90521+d5cc5c65
Oracle Linux 8mecab-ipadic-EUCJP2.7.0.20070801-17.0.1.module+el8.10.0+90521+d5cc5c65
Oracle Linux 8mysql8.0.41-1.module+el8.10.0+90521+d5cc5c65
Oracle Linux 8mysql-common8.0.41-1.module+el8.10.0+90521+d5cc5c65
Oracle Linux 8mysql-devel8.0.41-1.module+el8.10.0+90521+d5cc5c65
Oracle Linux 8mysql-errmsg8.0.41-1.module+el8.10.0+90521+d5cc5c65
Oracle Linux 8mysql-libs8.0.41-1.module+el8.10.0+90521+d5cc5c65
Oracle Linux 8mysql-server8.0.41-1.module+el8.10.0+90521+d5cc5c65
Oracle Linux 8mysql-test8.0.41-1.module+el8.10.0+90521+d5cc5c65
Oracle Linux 9krb5-devel1.21.1-2.0.1.el9_4
Oracle Linux 9krb5-libs1.21.1-2.0.1.el9_4
Oracle Linux 9krb5-pkinit1.21.1-2.0.1.el9_4
Oracle Linux 9krb5-server1.21.1-2.0.1.el9_4
Oracle Linux 9krb5-server-ldap1.21.1-2.0.1.el9_4
Oracle Linux 9krb5-workstation1.21.1-2.0.1.el9_4
Oracle Linux 9libkadm51.21.1-2.0.1.el9_4
Oracle Linux 9mysql8.0.41-2.el9_5
Oracle Linux 9mysql-common8.0.41-2.el9_5
Oracle Linux 9mysql-devel8.0.41-2.el9_5
Oracle Linux 9mysql-errmsg8.0.41-2.el9_5
Oracle Linux 9mysql-libs8.0.41-2.el9_5
Oracle Linux 9mysql-server8.0.41-2.el9_5
Oracle Linux 9mysql-test8.0.41-2.el9_5
rapidfort amazon linux 2023krb5-devel1.21.3-1.amzn2023.0.1
rapidfort amazon linux 2023krb5-libs0:1.21.3-1.amzn2023.0.1
rapidfort amazon linux 2023krb5-pkinit1.21.3-1.amzn2023.0.1
rapidfort amazon linux 2023krb5-server1.21.3-1.amzn2023.0.1
rapidfort amazon linux 2023krb5-server-ldap1.21.3-1.amzn2023.0.1
rapidfort amazon linux 2023krb5-workstation1.21.3-1.amzn2023.0.1
rapidfort amazon linux 2023libkadm51.21.3-1.amzn2023.0.1
rapidfort amazon linux 2023rf-krb5-libs0:1.21.3-1.amzn2023.0.1
rapidfort Oracle Linux 9krb5-devel0:1.21.1-2.0.1.el9_4
rapidfort Oracle Linux 9krb5-libs0:1.21.1-2.0.1.el9_4
rapidfort Oracle Linux 9krb5-pkinit0:1.21.1-2.0.1.el9_4
rapidfort Oracle Linux 9krb5-server0:1.21.1-2.0.1.el9_4
rapidfort Oracle Linux 9krb5-server-ldap0:1.21.1-2.0.1.el9_4
rapidfort Oracle Linux 9krb5-workstation0:1.21.1-2.0.1.el9_4
rapidfort Oracle Linux 9libkadm50:1.21.1-2.0.1.el9_4
rapidfort Oracle Linux 9mysql0:8.0.41-2.el9_5
rapidfort Oracle Linux 9mysql-common0:8.0.41-2.el9_5
rapidfort Oracle Linux 9mysql-errmsg0:8.0.41-2.el9_5
rapidfort Oracle Linux 9mysql-server0:8.0.41-2.el9_5
rapidfort ubuntu 20.04krb50:1.20.1-6ubuntu2.1
rapidfort ubuntu 20.04rf-krb50:1.20.1-6ubuntu2.1
rapidfort ubuntu 22.04krb50:1.20.1-6ubuntu2.1
rapidfort ubuntu 22.04rf-krb50:1.20.1-6ubuntu2.1
rapidfort ubuntu 24.04krb50:1.20.1-6ubuntu2.1
rapidfort ubuntu 24.04rf-krb50:1.20.1-6ubuntu2.1
Red Hatkrb5kein Fix angegeben
Red Hatkrb5-develkein Fix angegeben
Red Hatkrb5-libskein Fix angegeben
Red Hatkrb5-pkinit-opensslkein Fix angegeben
Red Hatkrb5-serverkein Fix angegeben
Red Hatkrb5-server-ldapkein Fix angegeben
Red Hatkrb5-workstationkein Fix angegeben
rocky 8krb5-devel1.18.2-29.el8_10
rocky 8krb5-libs1.18.2-29.el8_10
rocky 8krb5-pkinit1.18.2-29.el8_10
rocky 8krb5-server1.18.2-29.el8_10
rocky 8krb5-server-ldap1.18.2-29.el8_10
rocky 8krb5-workstation1.18.2-29.el8_10
rocky 8libkadm51.18.2-29.el8_10
rocky 8mysql:8.0::mecab0.996-2.module+el8.10.0+1676+9b4b6e24
rocky 8mysql:8.0::mecab-devel0.996-2.module+el8.10.0+1676+9b4b6e24
rocky 8mysql:8.0::mecab-ipadic2.7.0.20070801-17.module+el8.10.0+1937+28fbbc83
rocky 8mysql:8.0::mecab-ipadic-EUCJP2.7.0.20070801-17.module+el8.10.0+1937+28fbbc83
rocky 8mysql:8.0::mysql8.0.41-1.module+el8.10.0+1937+28fbbc83.0.1
rocky 8mysql:8.0::mysql-common8.0.41-1.module+el8.10.0+1937+28fbbc83.0.1
rocky 8mysql:8.0::mysql-devel8.0.41-1.module+el8.10.0+1937+28fbbc83.0.1
rocky 8mysql:8.0::mysql-errmsg8.0.41-1.module+el8.10.0+1937+28fbbc83.0.1
rocky 8mysql:8.0::mysql-libs8.0.41-1.module+el8.10.0+1937+28fbbc83.0.1
rocky 8mysql:8.0::mysql-server8.0.41-1.module+el8.10.0+1937+28fbbc83.0.1
rocky 8mysql:8.0::mysql-test8.0.41-1.module+el8.10.0+1937+28fbbc83.0.1
rocky 9mysql8.0.41-2.el9_5
rocky 9mysql-common8.0.41-2.el9_5
rocky 9mysql-errmsg8.0.41-2.el9_5
rocky 9mysql-server8.0.41-2.el9_5
root.io alpine 3.18rootio-krb51.20.2-r1
root.io debian 12rootio-krb51.20.1-2+deb12u2
root.io debian 13rootio-krb51.21.3-1
seal debiankrb51.18.3-6+deb11u6+sp999
seal debianseal-krb51.18.3-6+deb11u6+sp999
seal Red Hat 8krb51.18.2-14.0.1.el8+sp999, 1.18.2-30.el8_10+sp999
seal Red Hat 8seal-krb51.18.2-14.0.1.el8+sp999, 1.18.2-30.el8_10+sp999
ubuntu 14.04-ESMkrb51.12+dfsg-2ubuntu5.4+esm5
ubuntu 16.04-ESMkrb51.13.2+dfsg-5ubuntu2.2+esm5
ubuntu 18.04-ESMkrb51.16-2ubuntu0.4+esm2
ubuntu 20.04krb51.17-6ubuntu4.6
ubuntu 20.04-ESMkrb51.17-6ubuntu4.6
ubuntu 22.04krb51.19.2-2ubuntu0.4
ubuntu 24.04krb51.20.1-6ubuntu2.1

Referenzen

Alle 164 Referenzen

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.