Vulnerabilidades / CVE-2024-37371

crítica

CVE-2024-37371

krb5: GSS message token handling

Publicada Modificada CWE 125
En la Trivy database desde, como mínimo, el 24 oct 2026, 07:11 UTCNo consta cuándo entró antes de ese build.

Severidad por fuente

NVD9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Red Hat6.5CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Julia9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

La etiqueta propia de Trivy es CRITICAL. Crítica según NVD, Azure Linux, CBL-Mariner, Julia, Photon OS. Más baja según AlmaLinux (alta), Oracle (alta), Rocky Linux (alta), Red Hat (media), Amazon (media), Ubuntu (media).

Descripción

In MIT Kerberos 5 (aka krb5) before 1.21.3, an attacker can cause invalid memory reads during GSS message token handling by sending message tokens with invalid length fields.

Paquetes afectados y versiones corregidas

FuentePaqueteCorregido en
Azure Linux 3.0krb50:1.21.3-1.azl3
CBL-Mariner 2.0krb50:1.19.4-3.cm2
julia::Julia Ecosystem Security AdvisoriesKerberos_krb5_jll1.21.3+0
Photon OS 3.0krb51.17-7.ph3
Photon OS 4.0krb5, krb5-devel, krb5-lang1.17-12.ph4
Photon OS 5.0krb5, krb5-devel, krb5-doc y 1 más1.20.2-4.ph5
alma 8krb5-devel, krb5-libs, krb5-pkinit y 15 más1.18.2-29.el8_10 y 4 más
alma 9krb5-devel, krb5-libs, krb5-pkinit y 11 más1.21.1-2.el9_4 y 1 más
alpine 3.17krb51.20.2-r1
alpine 3.18krb51.20.2-r1
alpine 3.19krb51.20.3-r0
alpine 3.20krb51.20.3-r0
Mostrar las 187 entradas de 47 fuentes
FuentePaqueteCorregido en
Azure Linux 3.0krb50:1.21.3-1.azl3
CBL-Mariner 2.0krb50:1.19.4-3.cm2
julia::Julia Ecosystem Security AdvisoriesKerberos_krb5_jll1.21.3+0
Photon OS 3.0krb51.17-7.ph3
Photon OS 4.0krb51.17-12.ph4
Photon OS 4.0krb5-devel1.17-12.ph4
Photon OS 4.0krb5-lang1.17-12.ph4
Photon OS 5.0krb51.20.2-4.ph5
Photon OS 5.0krb5-devel1.20.2-4.ph5
Photon OS 5.0krb5-doc1.20.2-4.ph5
Photon OS 5.0krb5-lang1.20.2-4.ph5
alma 8krb5-devel1.18.2-29.el8_10
alma 8krb5-libs1.18.2-29.el8_10
alma 8krb5-pkinit1.18.2-29.el8_10
alma 8krb5-server1.18.2-29.el8_10
alma 8krb5-server-ldap1.18.2-29.el8_10
alma 8krb5-workstation1.18.2-29.el8_10
alma 8libkadm51.18.2-29.el8_10
alma 8mysql:8.0::mecab0.996-2.module_el8.6.0+3340+d764b636
alma 8mysql:8.0::mecab-devel0.996-2.module_el8.10.0+3965+b415b607
alma 8mysql:8.0::mecab-ipadic2.7.0.20070801-17.module_el8.10.0+3965+b415b607
alma 8mysql:8.0::mecab-ipadic-EUCJP2.7.0.20070801-17.module_el8.10.0+3965+b415b607
alma 8mysql:8.0::mysql8.0.41-1.module_el8.10.0+3965+b415b607
alma 8mysql:8.0::mysql-common8.0.41-1.module_el8.10.0+3965+b415b607
alma 8mysql:8.0::mysql-devel8.0.41-1.module_el8.10.0+3965+b415b607
alma 8mysql:8.0::mysql-errmsg8.0.41-1.module_el8.10.0+3965+b415b607
alma 8mysql:8.0::mysql-libs8.0.41-1.module_el8.10.0+3965+b415b607
alma 8mysql:8.0::mysql-server8.0.41-1.module_el8.10.0+3965+b415b607
alma 8mysql:8.0::mysql-test8.0.41-1.module_el8.10.0+3965+b415b607
alma 9krb5-devel1.21.1-2.el9_4
alma 9krb5-libs1.21.1-2.el9_4
alma 9krb5-pkinit1.21.1-2.el9_4
alma 9krb5-server1.21.1-2.el9_4
alma 9krb5-server-ldap1.21.1-2.el9_4
alma 9krb5-workstation1.21.1-2.el9_4
alma 9libkadm51.21.1-2.el9_4
alma 9mysql8.0.41-2.el9_5
alma 9mysql-common8.0.41-2.el9_5
alma 9mysql-devel8.0.41-2.el9_5
alma 9mysql-errmsg8.0.41-2.el9_5
alma 9mysql-libs8.0.41-2.el9_5
alma 9mysql-server8.0.41-2.el9_5
alma 9mysql-test8.0.41-2.el9_5
alpine 3.17krb51.20.2-r1
alpine 3.18krb51.20.2-r1
alpine 3.19krb51.20.3-r0
alpine 3.20krb51.20.3-r0
alpine 3.21krb51.20.3-r0
alpine 3.22krb51.20.3-r0
alpine 3.23krb51.20.3-r0
alpine 3.24krb51.20.3-r0
alpine edgekrb51.20.3-r0
amazon linux 2krb5-debuginfo1.15.1-55.amzn2.2.8
amazon linux 2krb5-devel1.15.1-55.amzn2.2.8
amazon linux 2krb5-libs1.15.1-55.amzn2.2.8
amazon linux 2krb5-pkinit1.15.1-55.amzn2.2.8
amazon linux 2krb5-server1.15.1-55.amzn2.2.8
amazon linux 2krb5-server-ldap1.15.1-55.amzn2.2.8
amazon linux 2krb5-workstation1.15.1-55.amzn2.2.8
amazon linux 2libkadm51.15.1-55.amzn2.2.8
amazon linux 2023krb5-debuginfo1.21.3-1.amzn2023.0.1
amazon linux 2023krb5-debugsource1.21.3-1.amzn2023.0.1
amazon linux 2023krb5-devel1.21.3-1.amzn2023.0.1
amazon linux 2023krb5-libs1.21.3-1.amzn2023.0.1
amazon linux 2023krb5-libs-debuginfo1.21.3-1.amzn2023.0.1
amazon linux 2023krb5-pkinit1.21.3-1.amzn2023.0.1
amazon linux 2023krb5-pkinit-debuginfo1.21.3-1.amzn2023.0.1
amazon linux 2023krb5-server1.21.3-1.amzn2023.0.1
amazon linux 2023krb5-server-debuginfo1.21.3-1.amzn2023.0.1
amazon linux 2023krb5-server-ldap1.21.3-1.amzn2023.0.1
amazon linux 2023krb5-server-ldap-debuginfo1.21.3-1.amzn2023.0.1
amazon linux 2023krb5-workstation1.21.3-1.amzn2023.0.1
amazon linux 2023krb5-workstation-debuginfo1.21.3-1.amzn2023.0.1
amazon linux 2023libkadm51.21.3-1.amzn2023.0.1
amazon linux 2023libkadm5-debuginfo1.21.3-1.amzn2023.0.1
debian 11krb51.18.3-6+deb11u5
debian 12krb51.20.1-2+deb12u2
debian 13krb51.21.3-1
debian 14krb51.21.3-1
echokrb51.20.1-2+deb12u2
Oracle Linux 7krb5-devel1.15.1-55.0.3.el7_9
Oracle Linux 7krb5-libs1.15.1-55.0.3.el7_9
Oracle Linux 7krb5-pkinit1.15.1-55.0.3.el7_9
Oracle Linux 7krb5-server1.15.1-55.0.3.el7_9
Oracle Linux 7krb5-server-ldap1.15.1-55.0.3.el7_9
Oracle Linux 7krb5-workstation1.15.1-55.0.3.el7_9
Oracle Linux 7libkadm51.15.1-55.0.3.el7_9
Oracle Linux 8krb5-devel1.18.2-29.0.1.el8_10
Oracle Linux 8krb5-libs1.18.2-29.0.1.el8_10
Oracle Linux 8krb5-pkinit1.18.2-29.0.1.el8_10
Oracle Linux 8krb5-server1.18.2-29.0.1.el8_10
Oracle Linux 8krb5-server-ldap1.18.2-29.0.1.el8_10
Oracle Linux 8krb5-workstation1.18.2-29.0.1.el8_10
Oracle Linux 8libkadm51.18.2-29.0.1.el8_10
Oracle Linux 8mecab0.996-2.module+el8.10.0+90521+d5cc5c65
Oracle Linux 8mecab-devel0.996-2.module+el8.10.0+90521+d5cc5c65
Oracle Linux 8mecab-ipadic2.7.0.20070801-17.0.1.module+el8.10.0+90521+d5cc5c65
Oracle Linux 8mecab-ipadic-EUCJP2.7.0.20070801-17.0.1.module+el8.10.0+90521+d5cc5c65
Oracle Linux 8mysql8.0.41-1.module+el8.10.0+90521+d5cc5c65
Oracle Linux 8mysql-common8.0.41-1.module+el8.10.0+90521+d5cc5c65
Oracle Linux 8mysql-devel8.0.41-1.module+el8.10.0+90521+d5cc5c65
Oracle Linux 8mysql-errmsg8.0.41-1.module+el8.10.0+90521+d5cc5c65
Oracle Linux 8mysql-libs8.0.41-1.module+el8.10.0+90521+d5cc5c65
Oracle Linux 8mysql-server8.0.41-1.module+el8.10.0+90521+d5cc5c65
Oracle Linux 8mysql-test8.0.41-1.module+el8.10.0+90521+d5cc5c65
Oracle Linux 9krb5-devel1.21.1-2.0.1.el9_4
Oracle Linux 9krb5-libs1.21.1-2.0.1.el9_4
Oracle Linux 9krb5-pkinit1.21.1-2.0.1.el9_4
Oracle Linux 9krb5-server1.21.1-2.0.1.el9_4
Oracle Linux 9krb5-server-ldap1.21.1-2.0.1.el9_4
Oracle Linux 9krb5-workstation1.21.1-2.0.1.el9_4
Oracle Linux 9libkadm51.21.1-2.0.1.el9_4
Oracle Linux 9mysql8.0.41-2.el9_5
Oracle Linux 9mysql-common8.0.41-2.el9_5
Oracle Linux 9mysql-devel8.0.41-2.el9_5
Oracle Linux 9mysql-errmsg8.0.41-2.el9_5
Oracle Linux 9mysql-libs8.0.41-2.el9_5
Oracle Linux 9mysql-server8.0.41-2.el9_5
Oracle Linux 9mysql-test8.0.41-2.el9_5
rapidfort amazon linux 2023krb5-devel1.21.3-1.amzn2023.0.1
rapidfort amazon linux 2023krb5-libs0:1.21.3-1.amzn2023.0.1
rapidfort amazon linux 2023krb5-pkinit1.21.3-1.amzn2023.0.1
rapidfort amazon linux 2023krb5-server1.21.3-1.amzn2023.0.1
rapidfort amazon linux 2023krb5-server-ldap1.21.3-1.amzn2023.0.1
rapidfort amazon linux 2023krb5-workstation1.21.3-1.amzn2023.0.1
rapidfort amazon linux 2023libkadm51.21.3-1.amzn2023.0.1
rapidfort amazon linux 2023rf-krb5-libs0:1.21.3-1.amzn2023.0.1
rapidfort Oracle Linux 9krb5-devel0:1.21.1-2.0.1.el9_4
rapidfort Oracle Linux 9krb5-libs0:1.21.1-2.0.1.el9_4
rapidfort Oracle Linux 9krb5-pkinit0:1.21.1-2.0.1.el9_4
rapidfort Oracle Linux 9krb5-server0:1.21.1-2.0.1.el9_4
rapidfort Oracle Linux 9krb5-server-ldap0:1.21.1-2.0.1.el9_4
rapidfort Oracle Linux 9krb5-workstation0:1.21.1-2.0.1.el9_4
rapidfort Oracle Linux 9libkadm50:1.21.1-2.0.1.el9_4
rapidfort Oracle Linux 9mysql0:8.0.41-2.el9_5
rapidfort Oracle Linux 9mysql-common0:8.0.41-2.el9_5
rapidfort Oracle Linux 9mysql-errmsg0:8.0.41-2.el9_5
rapidfort Oracle Linux 9mysql-server0:8.0.41-2.el9_5
rapidfort ubuntu 20.04krb50:1.20.1-6ubuntu2.1
rapidfort ubuntu 20.04rf-krb50:1.20.1-6ubuntu2.1
rapidfort ubuntu 22.04krb50:1.20.1-6ubuntu2.1
rapidfort ubuntu 22.04rf-krb50:1.20.1-6ubuntu2.1
rapidfort ubuntu 24.04krb50:1.20.1-6ubuntu2.1
rapidfort ubuntu 24.04rf-krb50:1.20.1-6ubuntu2.1
Red Hatkrb5sin corrección indicada
Red Hatkrb5-develsin corrección indicada
Red Hatkrb5-libssin corrección indicada
Red Hatkrb5-pkinit-opensslsin corrección indicada
Red Hatkrb5-serversin corrección indicada
Red Hatkrb5-server-ldapsin corrección indicada
Red Hatkrb5-workstationsin corrección indicada
rocky 8krb5-devel1.18.2-29.el8_10
rocky 8krb5-libs1.18.2-29.el8_10
rocky 8krb5-pkinit1.18.2-29.el8_10
rocky 8krb5-server1.18.2-29.el8_10
rocky 8krb5-server-ldap1.18.2-29.el8_10
rocky 8krb5-workstation1.18.2-29.el8_10
rocky 8libkadm51.18.2-29.el8_10
rocky 8mysql:8.0::mecab0.996-2.module+el8.10.0+1676+9b4b6e24
rocky 8mysql:8.0::mecab-devel0.996-2.module+el8.10.0+1676+9b4b6e24
rocky 8mysql:8.0::mecab-ipadic2.7.0.20070801-17.module+el8.10.0+1937+28fbbc83
rocky 8mysql:8.0::mecab-ipadic-EUCJP2.7.0.20070801-17.module+el8.10.0+1937+28fbbc83
rocky 8mysql:8.0::mysql8.0.41-1.module+el8.10.0+1937+28fbbc83.0.1
rocky 8mysql:8.0::mysql-common8.0.41-1.module+el8.10.0+1937+28fbbc83.0.1
rocky 8mysql:8.0::mysql-devel8.0.41-1.module+el8.10.0+1937+28fbbc83.0.1
rocky 8mysql:8.0::mysql-errmsg8.0.41-1.module+el8.10.0+1937+28fbbc83.0.1
rocky 8mysql:8.0::mysql-libs8.0.41-1.module+el8.10.0+1937+28fbbc83.0.1
rocky 8mysql:8.0::mysql-server8.0.41-1.module+el8.10.0+1937+28fbbc83.0.1
rocky 8mysql:8.0::mysql-test8.0.41-1.module+el8.10.0+1937+28fbbc83.0.1
rocky 9mysql8.0.41-2.el9_5
rocky 9mysql-common8.0.41-2.el9_5
rocky 9mysql-errmsg8.0.41-2.el9_5
rocky 9mysql-server8.0.41-2.el9_5
root.io alpine 3.18rootio-krb51.20.2-r1
root.io debian 12rootio-krb51.20.1-2+deb12u2
root.io debian 13rootio-krb51.21.3-1
seal debiankrb51.18.3-6+deb11u6+sp999
seal debianseal-krb51.18.3-6+deb11u6+sp999
seal Red Hat 8krb51.18.2-14.0.1.el8+sp999, 1.18.2-30.el8_10+sp999
seal Red Hat 8seal-krb51.18.2-14.0.1.el8+sp999, 1.18.2-30.el8_10+sp999
ubuntu 14.04-ESMkrb51.12+dfsg-2ubuntu5.4+esm5
ubuntu 16.04-ESMkrb51.13.2+dfsg-5ubuntu2.2+esm5
ubuntu 18.04-ESMkrb51.16-2ubuntu0.4+esm2
ubuntu 20.04krb51.17-6ubuntu4.6
ubuntu 20.04-ESMkrb51.17-6ubuntu4.6
ubuntu 22.04krb51.19.2-2ubuntu0.4
ubuntu 24.04krb51.20.1-6ubuntu2.1

Referencias

Las 164 referencias

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.