Zurück zur CVE-Übersicht
CVE-2026-112319
MEDIUM(6.5)CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Risk Signal Score21/100 — NIEDRIG
- CVSS 6.5 — Mittel
Erwähnungen (letzte 60 Tage)
Artikel
EPSS-Score
0.7%
Exploit-Wahrscheinlichkeit (30 Tage)
CVSS Score
6.5
Technische Schwere
Beschreibung
The GSS-RPC layer in MIT Kerberos 5 (aka krb5) does not enforce size limits on XDR-decoded data, which allows remote authenticated users to cause a denial of service (memory exhaustion or excessive CPU consumption in kadmind) via crafted RPC requests that trigger unbounded memory allocations during XDR decoding.