Threats tagged 'ghsa-hjgq-cq7f-j633'

MIT Kerberos 5 (krb5) version 1.4 and later contains a vulnerability in its GSS-RPC transport layer where the previous authentication context is not released when switching from a GSS flavor to a non-GSS flavor on the same TCP connection. This flaw allows remote attackers to cause a denial of service by exhausting memory in the kadmind service through repeated establishment and abandonment of GSS authentication contexts. The vulnerability affects exposed RPC services using the internal GSS-RPC transport over persistent TCP connections. Exploitation does not lead to remote code execution or unauthorized access to Kerberos database records.