Kerberos 5 (aka krb5) 1.21.2 contains a memory leak vulnerability in /krb5/src/kdc/ndr.c.
References
| Link | Resource |
|---|---|
| https://github.com/LuMingYinDetect/krb5_defects/blob/main/krb5_detect_3.md | Exploit |
| https://security.netapp.com/advisory/ntap-20240415-0012/ | Third Party Advisory |
| https://github.com/LuMingYinDetect/krb5_defects/blob/main/krb5_detect_3.md | Exploit |
| https://security.netapp.com/advisory/ntap-20240415-0012/ | Third Party Advisory |
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
| AND |
|
Configuration 4 (hide)
| AND |
|
Configuration 5 (hide)
| AND |
|
History
14 Feb 2025, 17:29
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Netapp h615c
Netapp Netapp management Services For Element Software And Netapp Hci Netapp h610s Netapp active Iq Unified Manager Netapp h610c Firmware Netapp h615c Firmware Netapp h610s Firmware Netapp ontap Select Deploy Administration Utility Netapp cloud Volumes Ontap Mediator Netapp h610c Mit Mit kerberos 5 |
|
| CWE | CWE-401 | |
| References | () https://github.com/LuMingYinDetect/krb5_defects/blob/main/krb5_detect_3.md - Exploit | |
| References | () https://security.netapp.com/advisory/ntap-20240415-0012/ - Third Party Advisory | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.5 |
| CPE | cpe:2.3:a:netapp:ontap_select_deploy_administration_utility:-:*:*:*:*:*:*:* cpe:2.3:h:netapp:h615c:-:*:*:*:*:*:*:* cpe:2.3:a:mit:kerberos_5:1.21.2:*:*:*:*:*:*:* cpe:2.3:a:netapp:cloud_volumes_ontap_mediator:-:*:*:*:*:*:*:* cpe:2.3:h:netapp:h610s:-:*:*:*:*:*:*:* cpe:2.3:o:netapp:h610s_firmware:-:*:*:*:*:*:*:* cpe:2.3:h:netapp:h610c:-:*:*:*:*:*:*:* cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:* cpe:2.3:o:netapp:h610c_firmware:-:*:*:*:*:*:*:* cpe:2.3:a:netapp:management_services_for_element_software_and_netapp_hci:-:*:*:*:*:*:*:* cpe:2.3:o:netapp:h615c_firmware:-:*:*:*:*:*:*:* |
21 Nov 2024, 09:02
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://github.com/LuMingYinDetect/krb5_defects/blob/main/krb5_detect_3.md - | |
| References | () https://security.netapp.com/advisory/ntap-20240415-0012/ - |
14 May 2024, 15:09
| Type | Values Removed | Values Added |
|---|---|---|
| Summary |
|
|
| References |
|
29 Feb 2024, 01:44
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-02-29 01:44
Updated : 2025-03-25 20:15
NVD link : CVE-2024-26462
Mitre link : CVE-2024-26462
CVE.ORG link : CVE-2024-26462
JSON object : View
Products Affected
netapp
- h615c_firmware
- ontap_select_deploy_administration_utility
- cloud_volumes_ontap_mediator
- h610s
- h615c
- active_iq_unified_manager
- management_services_for_element_software_and_netapp_hci
- h610c
- h610s_firmware
- h610c_firmware
mit
- kerberos_5
CWE
CWE-401
Missing Release of Memory after Effective Lifetime