CVE-2009-4212
- State
- Published
- Severity
- Not scored
- Published
- Jan 13, 2010
- Updated
- Aug 7, 2024
- Reserved
- Dec 4, 2009
Description
Multiple integer underflows in the (1) AES and (2) RC4 decryption functionality in the crypto library in MIT Kerberos 5 (aka krb5) 1.3 through 1.6.3, and 1.7 before 1.7.1, allow remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code by providing ciphertext with a length that is too short to be valid.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- APPLE-SA-2010-06-15-1vendor-advisory
- 38140third-party-advisory
- ADV-2010-0096vdb-entry
- http://support.avaya.com/css/P8/documents/100074869
- 38126third-party-advisory
- DSA-1969vendor-advisory
- ADV-2010-1481vdb-entry
- USN-881-1vendor-advisory
- SSRT100495vendor-advisory
- http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2009-004.txt
- FEDORA-2010-0503vendor-advisory
- MDVSA-2010:006vendor-advisory
- 1023440vdb-entry
- 38080third-party-advisory
- 275530vendor-advisory
- 1021779vendor-advisory
- oval:org.mitre.oval:def:8192vdb-entrysignature
- 38203third-party-advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=545015
- FEDORA-2010-0515vendor-advisory
- http://support.apple.com/kb/HT4188
- 40220third-party-advisory
- 38108third-party-advisory
- 37749vdb-entry
- oval:org.mitre.oval:def:11272vdb-entrysignature
- RHSA-2010:0029vendor-advisory
- RHSA-2010:0095vendor-advisory
- oval:org.mitre.oval:def:7357vdb-entrysignature
- 38696third-party-advisory
- ADV-2010-0129vdb-entry
- 38184third-party-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.