Kerberos 5 (aka krb5) 1.21.2 contains a memory leak vulnerability in /krb5/src/kdc/ndr.c.
References
| Link | Resource |
|---|---|
| https://github.com/LuMingYinDetect/krb5_defects/blob/main/krb5_detect_3.md | Exploit |
| https://security.netapp.com/advisory/ntap-20240415-0012/ | Third Party Advisory |
| https://github.com/LuMingYinDetect/krb5_defects/blob/main/krb5_detect_3.md | Exploit |
| https://security.netapp.com/advisory/ntap-20240415-0012/ | Third Party Advisory |
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
| AND |
|
Configuration 4 (hide)
| AND |
|
Configuration 5 (hide)
| AND |
|
History
14 Feb 2025, 17:29
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:o:netapp:h610s_firmware:-:*:*:*:*:*:*:* cpe:2.3:a:netapp:ontap_select_deploy_administration_utility:-:*:*:*:*:*:*:* cpe:2.3:o:netapp:h615c_firmware:-:*:*:*:*:*:*:* cpe:2.3:a:mit:kerberos_5:1.21.2:*:*:*:*:*:*:* cpe:2.3:a:netapp:management_services_for_element_software_and_netapp_hci:-:*:*:*:*:*:*:* cpe:2.3:h:netapp:h610c:-:*:*:*:*:*:*:* cpe:2.3:o:netapp:h610c_firmware:-:*:*:*:*:*:*:* cpe:2.3:a:netapp:cloud_volumes_ontap_mediator:-:*:*:*:*:*:*:* cpe:2.3:h:netapp:h615c:-:*:*:*:*:*:*:* cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:* cpe:2.3:h:netapp:h610s:-:*:*:*:*:*:*:* |
|
| First Time |
Netapp
Netapp h610c Netapp h610s Netapp active Iq Unified Manager Netapp h610s Firmware Netapp ontap Select Deploy Administration Utility Mit Netapp h615c Firmware Netapp h610c Firmware Mit kerberos 5 Netapp management Services For Element Software And Netapp Hci Netapp h615c Netapp cloud Volumes Ontap Mediator |
|
| References | () https://github.com/LuMingYinDetect/krb5_defects/blob/main/krb5_detect_3.md - Exploit | |
| References | () https://security.netapp.com/advisory/ntap-20240415-0012/ - Third Party Advisory | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.5 |
| CWE | CWE-401 |
21 Nov 2024, 09:02
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://github.com/LuMingYinDetect/krb5_defects/blob/main/krb5_detect_3.md - | |
| References | () https://security.netapp.com/advisory/ntap-20240415-0012/ - |
14 May 2024, 15:09
| Type | Values Removed | Values Added |
|---|---|---|
| Summary |
|
|
| References |
|
29 Feb 2024, 01:44
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-02-29 01:44
Updated : 2025-03-25 20:15
NVD link : CVE-2024-26462
Mitre link : CVE-2024-26462
CVE.ORG link : CVE-2024-26462
JSON object : View
Products Affected
netapp
- h610s_firmware
- h615c_firmware
- h610c_firmware
- h610s
- cloud_volumes_ontap_mediator
- management_services_for_element_software_and_netapp_hci
- h615c
- active_iq_unified_manager
- h610c
- ontap_select_deploy_administration_utility
mit
- kerberos_5
CWE
CWE-401
Missing Release of Memory after Effective Lifetime