https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 03:59:21 +0000 https://vulnerability.circl.lu/vuln/cve-2018-20217 <p>A Reachable Assertion issue was discovered in the KDC in MIT Kerberos 5 (aka krb5) before 1.17. If an attacker can obtain a krbtgt ticket using an older encryption type (single-DES, triple-DES, or RC4), the attacker can crash the KDC by making an S4U2Self request.</p> <p>A Reachable Assertion issue was discovered in the KDC in MIT Kerberos 5 (aka krb5) before 1.17. If an attacker can obtain a krbtgt ticket using an older encryption type (single-DES, triple-DES, or RC4), the attacker can crash the KDC by making an S4U2Self request.</p> https://vulnerability.circl.lu/vuln/cve-2018-20217 https://vulnerability.circl.lu/vuln/usn-5828-1 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: krb5, Ubuntu:Pro:16.04:LTS: krb5, Ubuntu:18.04:LTS: krb5, Ubuntu:20.04:LTS: krb5, Ubuntu:22.04:LTS: krb5</p> <p>It was discovered that Kerberos incorrectly handled certain S4U2Self requests. An attacker could possibly use this issue to cause a denial of service. This issue was only addressed in Ubuntu 16.04 ESM and Ubuntu 18.04 LTS. (CVE-2018-20217)</p> <p>Greg Hudson discovered that Kerberos PAC implementation incorrectly handled certain parsing operations. A remote attacker could use this issue to cause a denial of service, or possibly execute arbitrary code. (CVE-2022-42898)</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: krb5, Ubuntu:Pro:16.04:LTS: krb5, Ubuntu:18.04:LTS: krb5, Ubuntu:20.04:LTS: krb5, Ubuntu:22.04:LTS: krb5</p> <p>It was discovered that Kerberos incorrectly handled certain S4U2Self requests. An attacker could possibly use this issue to cause a denial of service. This issue was only addressed in Ubuntu 16.04 ESM and Ubuntu 18.04 LTS. (CVE-2018-20217)</p> <p>Greg Hudson discovered that Kerberos PAC implementation incorrectly handled certain parsing operations. A remote attacker could use this issue to cause a denial of service, or possibly execute arbitrary code. (CVE-2022-42898)</p> https://vulnerability.circl.lu/vuln/usn-5828-1