Skip to content
OpenAdvisories

Package · Debian

libpam-krb5

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Feed

  • Unscored —
    CVE-2023-3326

    Network authentication attack via pam_krb5

    pam_krb5 authenticates a user by essentially running kinit with the password, getting a ticket-granting ticket (tgt) from the Kerberos KDC (Key Distribution Center) over the network, as a way to verify the password. However, if a keytab is not provisioned on …

    FreeBSD FreeBSD sssd libpam-krb5 Debian Ubuntu
  • Unscored —
    CVE-2020-10595

    pam-krb5 before 4.9 has a buffer overflow that might cause remote code execution in situations involving supplemental p…

    libpam-krb5 libpam-krb5 Debian Ubuntu
  • Unscored —
    CVE-2009-0361

    Russ Allbery pam-krb5 before 3.13, as used by libpam-heimdal, su in Solaris 10, and other software, does not properly h…

    libpam-krb5 Debian
  • Unscored —
    CVE-2009-0360 Public exploit

    Russ Allbery pam-krb5 before 3.13, when linked against MIT Kerberos, does not properly initialize the Kerberos librarie…

    libpam-krb5 Debian