CVE-2017-17439
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
3Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackepss 3.4%
In Heimdal through 7.4, remote unauthenticated attackers are able to crash the KDC by sending a crafted UDP packet containing empty data fields for client name or realm. The parser would unconditionally dereference NULL pointers in that case, leading to a segmentation fault. This is related to the _kdc_as_rep function in kdc/kerberos5.c and the der_length_visible_string function in lib/asn1/der_length.c.
Produtos afetados
n/a · n/aReferências
http://h5l.org/advisories.html?show=2017-12-08https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=878144https://github.com/heimdal/heimdal/commit/1a6a6e462dc2ac6111f9e02c6852ddec4849b887https://github.com/heimdal/heimdal/issues/353https://www.debian.org/security/2017/dsa-4055http://www.h5l.org/pipermail/heimdal-announce/2017-December/000008.htmlhttp://www.h5l.org/pipermail/heimdal-discuss/2017-August/000259.html