Threats tagged 'ghsa-vhj5-cwj8-wqq6'

A memory leak vulnerability exists in the clnttcp_call() function of lib/rpc/clnt_tcp.c in MIT Kerberos 5 (krb5). This flaw causes the RPC reply verifier to not be freed between retries, allowing remote attackers to cause denial of service by exhausting client memory through injected RPC replies with mismatched XIDs or triggering authentication retries. The issue affects client-side RPC processing and does not impact authentication servers or default daemon operations. Exploitation requires control over a remote RPC endpoint or interception of client network traffic and a continuous flood of malformed responses during an active transaction.