Vulnérabilités / CVE-2024-37371

critique

CVE-2024-37371

krb5: GSS message token handling

Publiée Modifiée CWE 125
Dans la Trivy database depuis au moins le 24 oct. 2026, 07:11 UTCLa date d'entrée avant ce build n'est pas enregistrée.

Sévérité par source

NVD9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Red Hat6.5CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Julia9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

Le label propre à Trivy est CRITICAL. Critique selon NVD, Azure Linux, CBL-Mariner, Julia, Photon OS. Plus basse selon AlmaLinux (élevée), Oracle (élevée), Rocky Linux (élevée), Red Hat (moyenne), Amazon (moyenne), Ubuntu (moyenne).

Description

In MIT Kerberos 5 (aka krb5) before 1.21.3, an attacker can cause invalid memory reads during GSS message token handling by sending message tokens with invalid length fields.

Paquets affectés et versions corrigées

SourcePaquetCorrigé en
Azure Linux 3.0krb50:1.21.3-1.azl3
CBL-Mariner 2.0krb50:1.19.4-3.cm2
julia::Julia Ecosystem Security AdvisoriesKerberos_krb5_jll1.21.3+0
Photon OS 3.0krb51.17-7.ph3
Photon OS 4.0krb5, krb5-devel, krb5-lang1.17-12.ph4
Photon OS 5.0krb5, krb5-devel, krb5-doc et 1 autres1.20.2-4.ph5
alma 8krb5-devel, krb5-libs, krb5-pkinit et 15 autres1.18.2-29.el8_10 et 4 autres
alma 9krb5-devel, krb5-libs, krb5-pkinit et 11 autres1.21.1-2.el9_4 et 1 autres
alpine 3.17krb51.20.2-r1
alpine 3.18krb51.20.2-r1
alpine 3.19krb51.20.3-r0
alpine 3.20krb51.20.3-r0
Afficher les 187 entrées de 47 sources
SourcePaquetCorrigé en
Azure Linux 3.0krb50:1.21.3-1.azl3
CBL-Mariner 2.0krb50:1.19.4-3.cm2
julia::Julia Ecosystem Security AdvisoriesKerberos_krb5_jll1.21.3+0
Photon OS 3.0krb51.17-7.ph3
Photon OS 4.0krb51.17-12.ph4
Photon OS 4.0krb5-devel1.17-12.ph4
Photon OS 4.0krb5-lang1.17-12.ph4
Photon OS 5.0krb51.20.2-4.ph5
Photon OS 5.0krb5-devel1.20.2-4.ph5
Photon OS 5.0krb5-doc1.20.2-4.ph5
Photon OS 5.0krb5-lang1.20.2-4.ph5
alma 8krb5-devel1.18.2-29.el8_10
alma 8krb5-libs1.18.2-29.el8_10
alma 8krb5-pkinit1.18.2-29.el8_10
alma 8krb5-server1.18.2-29.el8_10
alma 8krb5-server-ldap1.18.2-29.el8_10
alma 8krb5-workstation1.18.2-29.el8_10
alma 8libkadm51.18.2-29.el8_10
alma 8mysql:8.0::mecab0.996-2.module_el8.6.0+3340+d764b636
alma 8mysql:8.0::mecab-devel0.996-2.module_el8.10.0+3965+b415b607
alma 8mysql:8.0::mecab-ipadic2.7.0.20070801-17.module_el8.10.0+3965+b415b607
alma 8mysql:8.0::mecab-ipadic-EUCJP2.7.0.20070801-17.module_el8.10.0+3965+b415b607
alma 8mysql:8.0::mysql8.0.41-1.module_el8.10.0+3965+b415b607
alma 8mysql:8.0::mysql-common8.0.41-1.module_el8.10.0+3965+b415b607
alma 8mysql:8.0::mysql-devel8.0.41-1.module_el8.10.0+3965+b415b607
alma 8mysql:8.0::mysql-errmsg8.0.41-1.module_el8.10.0+3965+b415b607
alma 8mysql:8.0::mysql-libs8.0.41-1.module_el8.10.0+3965+b415b607
alma 8mysql:8.0::mysql-server8.0.41-1.module_el8.10.0+3965+b415b607
alma 8mysql:8.0::mysql-test8.0.41-1.module_el8.10.0+3965+b415b607
alma 9krb5-devel1.21.1-2.el9_4
alma 9krb5-libs1.21.1-2.el9_4
alma 9krb5-pkinit1.21.1-2.el9_4
alma 9krb5-server1.21.1-2.el9_4
alma 9krb5-server-ldap1.21.1-2.el9_4
alma 9krb5-workstation1.21.1-2.el9_4
alma 9libkadm51.21.1-2.el9_4
alma 9mysql8.0.41-2.el9_5
alma 9mysql-common8.0.41-2.el9_5
alma 9mysql-devel8.0.41-2.el9_5
alma 9mysql-errmsg8.0.41-2.el9_5
alma 9mysql-libs8.0.41-2.el9_5
alma 9mysql-server8.0.41-2.el9_5
alma 9mysql-test8.0.41-2.el9_5
alpine 3.17krb51.20.2-r1
alpine 3.18krb51.20.2-r1
alpine 3.19krb51.20.3-r0
alpine 3.20krb51.20.3-r0
alpine 3.21krb51.20.3-r0
alpine 3.22krb51.20.3-r0
alpine 3.23krb51.20.3-r0
alpine 3.24krb51.20.3-r0
alpine edgekrb51.20.3-r0
amazon linux 2krb5-debuginfo1.15.1-55.amzn2.2.8
amazon linux 2krb5-devel1.15.1-55.amzn2.2.8
amazon linux 2krb5-libs1.15.1-55.amzn2.2.8
amazon linux 2krb5-pkinit1.15.1-55.amzn2.2.8
amazon linux 2krb5-server1.15.1-55.amzn2.2.8
amazon linux 2krb5-server-ldap1.15.1-55.amzn2.2.8
amazon linux 2krb5-workstation1.15.1-55.amzn2.2.8
amazon linux 2libkadm51.15.1-55.amzn2.2.8
amazon linux 2023krb5-debuginfo1.21.3-1.amzn2023.0.1
amazon linux 2023krb5-debugsource1.21.3-1.amzn2023.0.1
amazon linux 2023krb5-devel1.21.3-1.amzn2023.0.1
amazon linux 2023krb5-libs1.21.3-1.amzn2023.0.1
amazon linux 2023krb5-libs-debuginfo1.21.3-1.amzn2023.0.1
amazon linux 2023krb5-pkinit1.21.3-1.amzn2023.0.1
amazon linux 2023krb5-pkinit-debuginfo1.21.3-1.amzn2023.0.1
amazon linux 2023krb5-server1.21.3-1.amzn2023.0.1
amazon linux 2023krb5-server-debuginfo1.21.3-1.amzn2023.0.1
amazon linux 2023krb5-server-ldap1.21.3-1.amzn2023.0.1
amazon linux 2023krb5-server-ldap-debuginfo1.21.3-1.amzn2023.0.1
amazon linux 2023krb5-workstation1.21.3-1.amzn2023.0.1
amazon linux 2023krb5-workstation-debuginfo1.21.3-1.amzn2023.0.1
amazon linux 2023libkadm51.21.3-1.amzn2023.0.1
amazon linux 2023libkadm5-debuginfo1.21.3-1.amzn2023.0.1
debian 11krb51.18.3-6+deb11u5
debian 12krb51.20.1-2+deb12u2
debian 13krb51.21.3-1
debian 14krb51.21.3-1
echokrb51.20.1-2+deb12u2
Oracle Linux 7krb5-devel1.15.1-55.0.3.el7_9
Oracle Linux 7krb5-libs1.15.1-55.0.3.el7_9
Oracle Linux 7krb5-pkinit1.15.1-55.0.3.el7_9
Oracle Linux 7krb5-server1.15.1-55.0.3.el7_9
Oracle Linux 7krb5-server-ldap1.15.1-55.0.3.el7_9
Oracle Linux 7krb5-workstation1.15.1-55.0.3.el7_9
Oracle Linux 7libkadm51.15.1-55.0.3.el7_9
Oracle Linux 8krb5-devel1.18.2-29.0.1.el8_10
Oracle Linux 8krb5-libs1.18.2-29.0.1.el8_10
Oracle Linux 8krb5-pkinit1.18.2-29.0.1.el8_10
Oracle Linux 8krb5-server1.18.2-29.0.1.el8_10
Oracle Linux 8krb5-server-ldap1.18.2-29.0.1.el8_10
Oracle Linux 8krb5-workstation1.18.2-29.0.1.el8_10
Oracle Linux 8libkadm51.18.2-29.0.1.el8_10
Oracle Linux 8mecab0.996-2.module+el8.10.0+90521+d5cc5c65
Oracle Linux 8mecab-devel0.996-2.module+el8.10.0+90521+d5cc5c65
Oracle Linux 8mecab-ipadic2.7.0.20070801-17.0.1.module+el8.10.0+90521+d5cc5c65
Oracle Linux 8mecab-ipadic-EUCJP2.7.0.20070801-17.0.1.module+el8.10.0+90521+d5cc5c65
Oracle Linux 8mysql8.0.41-1.module+el8.10.0+90521+d5cc5c65
Oracle Linux 8mysql-common8.0.41-1.module+el8.10.0+90521+d5cc5c65
Oracle Linux 8mysql-devel8.0.41-1.module+el8.10.0+90521+d5cc5c65
Oracle Linux 8mysql-errmsg8.0.41-1.module+el8.10.0+90521+d5cc5c65
Oracle Linux 8mysql-libs8.0.41-1.module+el8.10.0+90521+d5cc5c65
Oracle Linux 8mysql-server8.0.41-1.module+el8.10.0+90521+d5cc5c65
Oracle Linux 8mysql-test8.0.41-1.module+el8.10.0+90521+d5cc5c65
Oracle Linux 9krb5-devel1.21.1-2.0.1.el9_4
Oracle Linux 9krb5-libs1.21.1-2.0.1.el9_4
Oracle Linux 9krb5-pkinit1.21.1-2.0.1.el9_4
Oracle Linux 9krb5-server1.21.1-2.0.1.el9_4
Oracle Linux 9krb5-server-ldap1.21.1-2.0.1.el9_4
Oracle Linux 9krb5-workstation1.21.1-2.0.1.el9_4
Oracle Linux 9libkadm51.21.1-2.0.1.el9_4
Oracle Linux 9mysql8.0.41-2.el9_5
Oracle Linux 9mysql-common8.0.41-2.el9_5
Oracle Linux 9mysql-devel8.0.41-2.el9_5
Oracle Linux 9mysql-errmsg8.0.41-2.el9_5
Oracle Linux 9mysql-libs8.0.41-2.el9_5
Oracle Linux 9mysql-server8.0.41-2.el9_5
Oracle Linux 9mysql-test8.0.41-2.el9_5
rapidfort amazon linux 2023krb5-devel1.21.3-1.amzn2023.0.1
rapidfort amazon linux 2023krb5-libs0:1.21.3-1.amzn2023.0.1
rapidfort amazon linux 2023krb5-pkinit1.21.3-1.amzn2023.0.1
rapidfort amazon linux 2023krb5-server1.21.3-1.amzn2023.0.1
rapidfort amazon linux 2023krb5-server-ldap1.21.3-1.amzn2023.0.1
rapidfort amazon linux 2023krb5-workstation1.21.3-1.amzn2023.0.1
rapidfort amazon linux 2023libkadm51.21.3-1.amzn2023.0.1
rapidfort amazon linux 2023rf-krb5-libs0:1.21.3-1.amzn2023.0.1
rapidfort Oracle Linux 9krb5-devel0:1.21.1-2.0.1.el9_4
rapidfort Oracle Linux 9krb5-libs0:1.21.1-2.0.1.el9_4
rapidfort Oracle Linux 9krb5-pkinit0:1.21.1-2.0.1.el9_4
rapidfort Oracle Linux 9krb5-server0:1.21.1-2.0.1.el9_4
rapidfort Oracle Linux 9krb5-server-ldap0:1.21.1-2.0.1.el9_4
rapidfort Oracle Linux 9krb5-workstation0:1.21.1-2.0.1.el9_4
rapidfort Oracle Linux 9libkadm50:1.21.1-2.0.1.el9_4
rapidfort Oracle Linux 9mysql0:8.0.41-2.el9_5
rapidfort Oracle Linux 9mysql-common0:8.0.41-2.el9_5
rapidfort Oracle Linux 9mysql-errmsg0:8.0.41-2.el9_5
rapidfort Oracle Linux 9mysql-server0:8.0.41-2.el9_5
rapidfort ubuntu 20.04krb50:1.20.1-6ubuntu2.1
rapidfort ubuntu 20.04rf-krb50:1.20.1-6ubuntu2.1
rapidfort ubuntu 22.04krb50:1.20.1-6ubuntu2.1
rapidfort ubuntu 22.04rf-krb50:1.20.1-6ubuntu2.1
rapidfort ubuntu 24.04krb50:1.20.1-6ubuntu2.1
rapidfort ubuntu 24.04rf-krb50:1.20.1-6ubuntu2.1
Red Hatkrb5pas de correctif indiqué
Red Hatkrb5-develpas de correctif indiqué
Red Hatkrb5-libspas de correctif indiqué
Red Hatkrb5-pkinit-opensslpas de correctif indiqué
Red Hatkrb5-serverpas de correctif indiqué
Red Hatkrb5-server-ldappas de correctif indiqué
Red Hatkrb5-workstationpas de correctif indiqué
rocky 8krb5-devel1.18.2-29.el8_10
rocky 8krb5-libs1.18.2-29.el8_10
rocky 8krb5-pkinit1.18.2-29.el8_10
rocky 8krb5-server1.18.2-29.el8_10
rocky 8krb5-server-ldap1.18.2-29.el8_10
rocky 8krb5-workstation1.18.2-29.el8_10
rocky 8libkadm51.18.2-29.el8_10
rocky 8mysql:8.0::mecab0.996-2.module+el8.10.0+1676+9b4b6e24
rocky 8mysql:8.0::mecab-devel0.996-2.module+el8.10.0+1676+9b4b6e24
rocky 8mysql:8.0::mecab-ipadic2.7.0.20070801-17.module+el8.10.0+1937+28fbbc83
rocky 8mysql:8.0::mecab-ipadic-EUCJP2.7.0.20070801-17.module+el8.10.0+1937+28fbbc83
rocky 8mysql:8.0::mysql8.0.41-1.module+el8.10.0+1937+28fbbc83.0.1
rocky 8mysql:8.0::mysql-common8.0.41-1.module+el8.10.0+1937+28fbbc83.0.1
rocky 8mysql:8.0::mysql-devel8.0.41-1.module+el8.10.0+1937+28fbbc83.0.1
rocky 8mysql:8.0::mysql-errmsg8.0.41-1.module+el8.10.0+1937+28fbbc83.0.1
rocky 8mysql:8.0::mysql-libs8.0.41-1.module+el8.10.0+1937+28fbbc83.0.1
rocky 8mysql:8.0::mysql-server8.0.41-1.module+el8.10.0+1937+28fbbc83.0.1
rocky 8mysql:8.0::mysql-test8.0.41-1.module+el8.10.0+1937+28fbbc83.0.1
rocky 9mysql8.0.41-2.el9_5
rocky 9mysql-common8.0.41-2.el9_5
rocky 9mysql-errmsg8.0.41-2.el9_5
rocky 9mysql-server8.0.41-2.el9_5
root.io alpine 3.18rootio-krb51.20.2-r1
root.io debian 12rootio-krb51.20.1-2+deb12u2
root.io debian 13rootio-krb51.21.3-1
seal debiankrb51.18.3-6+deb11u6+sp999
seal debianseal-krb51.18.3-6+deb11u6+sp999
seal Red Hat 8krb51.18.2-14.0.1.el8+sp999, 1.18.2-30.el8_10+sp999
seal Red Hat 8seal-krb51.18.2-14.0.1.el8+sp999, 1.18.2-30.el8_10+sp999
ubuntu 14.04-ESMkrb51.12+dfsg-2ubuntu5.4+esm5
ubuntu 16.04-ESMkrb51.13.2+dfsg-5ubuntu2.2+esm5
ubuntu 18.04-ESMkrb51.16-2ubuntu0.4+esm2
ubuntu 20.04krb51.17-6ubuntu4.6
ubuntu 20.04-ESMkrb51.17-6ubuntu4.6
ubuntu 22.04krb51.19.2-2ubuntu0.4
ubuntu 24.04krb51.20.1-6ubuntu2.1

Références

Les 164 références

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.