The remote CentOS Linux 9 host has packages installed that are affected by a vulnerability as referenced in the krb5-1.21.1-1.el9 build changelog.

  - kdc/do_tgs_req.c in MIT Kerberos 5 (aka krb5) 1.21 before 1.21.2 has a double free that is reachable if an     authenticated user can trigger an authorization-data handling failure. Incorrect data is copied from one     ticket to another. (CVE-2023-39975)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:6699 advisory.

    Kerberos is a network authentication system, which can improve the security of your network by eliminating     the insecure practice of sending passwords over the network in unencrypted form. It allows clients and     servers to authenticate to each other with the help of a trusted third party, the Kerberos key     distribution center (KDC).

    Security Fix(es):

    * krb5: Denial of service through freeing uninitialized pointer (CVE-2023-36054)

    * krb5: double-free in KDC TGS processing (CVE-2023-39975)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 9.3 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-6699 advisory.

    - Fix double-free in KDC TGS processing (CVE-2023-39975)

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2023:6699 advisory.

    * krb5: Denial of service through freeing uninitialized pointer (CVE-2023-36054)

    * krb5: double-free in KDC TGS processing (CVE-2023-39975)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-2023_6699 advisory.

    * krb5: Denial of service through freeing uninitialized pointer (CVE-2023-36054)

    * krb5: double-free in KDC TGS processing (CVE-2023-39975)

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The versions of MySQL Server installed on the remote host are affected by multiple vulnerabilities as referenced in the April 2024 CPU advisory.

  - Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Compiling (curl)). Supported     versions that are affected are 5.7.43 and prior, 8.0.34 and prior and 8.1.0. Difficult to exploit     vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL     Server. Successful attacks require human interaction from a person other than the attacker. Successful     attacks of this vulnerability can result in takeover of MySQL Server. (CVE-2023-38545)

  - Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions     that are affected are 8.0.34 and prior and 8.1.0. Easily exploitable vulnerability allows low privileged     attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this     vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete     DOS) of MySQL Server. (CVE-2023-22059)

  - Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are     affected are 5.7.43 and prior, 8.0.34 and prior and 8.1.0. Easily exploitable vulnerability allows high     privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks     of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash     (complete DOS) of MySQL Server. (CVE-2023-22084)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2023-6633:07 advisory.

    * krb5: Denial of service through freeing uninitialized pointer (CVE-2023-36054)
      * krb5: double-free in KDC TGS processing (CVE-2023-39975)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote host is affected by the vulnerability described in GLSA-202405-11 (MIT krb5: Multiple Vulnerabilities)

  - ec_verify in kdc/kdc_preauth_ec.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before     1.18.4 and 1.19.x before 1.19.2 allows remote attackers to cause a NULL pointer dereference and daemon     crash. This occurs because a return value is not properly managed in a certain situation. (CVE-2021-36222)

  - The Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.18.5 and 1.19.x before 1.19.3 has     a NULL pointer dereference in kdc/do_tgs_req.c via a FAST inner body that lacks a server field.
    (CVE-2021-37750)

  - PAC parsing in MIT Kerberos 5 (aka krb5) before 1.19.4 and 1.20.x before 1.20.1 has integer overflows that     may lead to remote code execution (in KDC, kadmind, or a GSS or Kerberos application server) on 32-bit     platforms (which have a resultant heap-based buffer overflow), and cause a denial of service on other     platforms. This occurs in krb5_pac_parse in lib/krb5/krb/pac.c. Heimdal before 7.7.1 has a similar bug.
    (CVE-2022-42898)

  - lib/kadm5/kadm_rpc_xdr.c in MIT Kerberos 5 (aka krb5) before 1.20.2 and 1.21.x before 1.21.1 frees an     uninitialized pointer. A remote authenticated user can trigger a kadmind crash. This occurs because
    _xdr_kadm5_principal_ent_rec does not validate the relationship between n_key_data and the key_data array     count. (CVE-2023-36054)

  - kdc/do_tgs_req.c in MIT Kerberos 5 (aka krb5) 1.21 before 1.21.2 has a double free that is reachable if an     authenticated user can trigger an authorization-data handling failure. Incorrect data is copied from one     ticket to another. (CVE-2023-39975)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2023-321 advisory.

    lib/kadm5/kadm_rpc_xdr.c in MIT Kerberos 5 (aka krb5) before 1.20.2 and 1.21.x before 1.21.1 frees an     uninitialized pointer. A remote authenticated user can trigger a kadmind crash. This occurs because
    _xdr_kadm5_principal_ent_rec does not validate the relationship between n_key_data and the key_data array     count. (CVE-2023-36054)

    kdc/do_tgs_req.c in MIT Kerberos 5 (aka krb5) 1.21 before 1.21.2 has a double free that is reachable if an     authenticated user can trigger an authorization-data handling failure. Incorrect data is copied from one     ticket to another. (CVE-2023-39975)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
191209	CentOS 9 : krb5-1.21.1-1.el9	Nessus	CentOS Local Security Checks	2/29/2024	4/26/2024	high
185135	RHEL 9 : krb5 (RHSA-2023:6699)	Nessus	Red Hat Local Security Checks	11/7/2023	11/7/2024	critical
185832	Oracle Linux 9 : krb5 (ELSA-2023-6699)	Nessus	Oracle Linux Local Security Checks	11/16/2023	9/9/2025	high
317413	RockyLinux 9 : krb5 (RLSA-2023:6699)	Nessus	Rocky Linux Local Security Checks	5/28/2026	5/28/2026	high
356725	Rocky Linux 9 [CIQ] Security Update: krb5-debuginfo / krb5-debugsource / krb5-devel / krb5-libs / etc Multiple Vulnerabilities (crlsa-2023_6699)	Nessus	Rocky Linux Local Security Checks	10/1/2026	10/1/2026	high
183394	Oracle MySQL Server 8.0.x < 8.0.34 (April 2023 CPU)	Nessus	Databases	10/19/2023	11/5/2025	critical
293059	MiracleLinux 9 : krb5-1.21.1-1.el9 (AXSA:2023-6633:07)	Nessus	Miracle Linux Local Security Checks	1/20/2026	1/20/2026	high
194990	GLSA-202405-11 : MIT krb5: Multiple Vulnerabilities	Nessus	Gentoo Local Security Checks	5/5/2024	5/5/2024	high
181152	Amazon Linux 2023 : krb5-devel, krb5-libs, krb5-pkinit (ALAS2023-2023-321)	Nessus	Amazon Linux Local Security Checks	9/8/2023	12/11/2024	critical

Detections

Analytics

Plugins Search

high

critical

high

high

high

critical

high

high

critical