https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-12T07:40:08.497603+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2023-36054 CVE-2023-36054 2026-10-12T07:40:08.798787+00:00

lib/kadm5/kadm_rpc_xdr.c in MIT Kerberos 5 (aka krb5) before 1.20.2 and 1.21.x before 1.21.1 frees an uninitialized pointer. A remote authenticated user can trigger a kadmind crash. This occurs because _xdr_kadm5_principal_ent_rec does not validate the relationship between n_key_data and the key_data array count.

 https://vulnerability.circl.lu/vuln/usn-6467-1 USN-6467-1 — krb5 vulnerability 2026-10-12T07:40:08.799009+00:00

Affected: Ubuntu:Pro:14.04:LTS: krb5, Ubuntu:Pro:16.04:LTS: krb5, Ubuntu:Pro:18.04:LTS: krb5

Robert Morris discovered that Kerberos did not properly handle memory access when processing RPC data through kadmind, which could lead to the freeing of uninitialized memory. An authenticated remote attacker could possibly use this issue to cause kadmind to crash, resulting in a denial of service.