VDB
GCVE-110-MAGEIA-2015-119
GCVE-110-MAGEIA-2015-119
Advisory Published
MIT Kerberos 5 through 1.13.1 incorrectly expects that a krb5_read_message
data field is represented as a string ending with a '\0' character, which
allows remote attackers to cause a denial of service (NULL pointer
dereference) via a zero-byte version string or cause a denial of service
(out-of-bounds read) by omitting the '\0' character, related to
appl/user_user/server.c and lib/krb5/krb/recvauth.c (CVE-2014-5355).
Affected Products
| Vendor | Product | Versions | Platforms |
|---|---|---|---|
| Mageia | krb5 | 0 (affected), 1.11.4-1.5.mga4 (unaffected) | — |
Browse GCVE Records
20,165 records in the GCVE database · Updated October 21, 2026
No matching records found.
Explore Further
Investigate this vulnerability in the interactive console or download the raw GCVE record.