The remote MiracleLinux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2009-41:01 advisory.

    Kerberos is a network authentication system. The krb5-server package contains the programs that must be     installed on a Kerberos 5 server. If you are installing a Kerberos 5 server, you need to install this     package.
    Fixed bugs:
    CVE-2009-0844     The get_input_token function in the SPNEGO implementation in MIT Kerberos 5 (aka krb5) 1.5 through 1.6.3     allows remote attackers to cause a denial of service (daemon crash) and possibly obtain sensitive     information via a crafted length value that triggers a buffer over-read.
    CVE-2009-0845     The spnego_gss_accept_sec_context function in lib/gssapi/spnego/spnego_mech.c in MIT Kerberos 5 (aka krb5)     1.6.3, when SPNEGO is used, allows remote attackers to cause a denial of service (NULL pointer dereference     and application crash) via invalid ContextFlags data in the reqFlags field in a negTokenInit token.
    CVE-2009-0846     The asn1_decode_generaltime function in lib/krb5/asn.1/asn1_decode.c in the ASN.1 GeneralizedTime decoder     in MIT Kerberos 5 (aka krb5) before 1.6.4 allows remote attackers to cause a denial of service (daemon     crash) or possibly execute arbitrary code via vectors involving an invalid DER encoding that triggers a     free of an uninitialized pointer.

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote OracleVM system is missing necessary patches to address critical security updates :

CVE-2009-0844 The get_input_token function in the SPNEGO implementation in MIT Kerberos 5 (aka krb5) 1.5 through 1.6.3 allows remote attackers to cause a denial of service (daemon crash) and possibly obtain sensitive information via a crafted length value that triggers a buffer over-read.

CVE-2009-0845 The spnego_gss_accept_sec_context function in lib/gssapi/spnego/spnego_mech.c in MIT Kerberos 5 (aka krb5) 1.5 through 1.6.3, when SPNEGO is used, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via invalid ContextFlags data in the reqFlags field in a negTokenInit token.

CVE-2009-0846 The asn1_decode_generaltime function in lib/krb5/asn.1/asn1_decode.c in the ASN.1 GeneralizedTime decoder in MIT Kerberos 5 (aka krb5) before 1.6.4 allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via vectors involving an invalid DER encoding that triggers a free of an uninitialized pointer.

  - update to revised patch for (CVE-2009-0844,     CVE-2009-0845)

  - add fix for potential buffer read overrun in the SPNEGO     GSSAPI mechanism (#490635, CVE-2009-0844)

  - add fix for NULL pointer dereference when handling     certain error cases in the SPNEGO GSSAPI mechanism     (#490635, CVE-2009-0845)

  - add fix for attempt to free uninitialized pointer in the     ASN.1 decoder (#490635, CVE-2009-0846)

  - add fix for bug in length validation in the ASN.1     decoder (CVE-2009-0847)

  - add backport of svn patch to fix a bug in how the gssapi     library handles certain error cases in     gss_accept_sec_context (CVE-2009-0845, 

  - add a backported patch which adds a check on credentials     obtained from a foreign realm to make sure that they're     of an acceptable type, and if not, retry to the request     to get one of the right type (Sadique Puthen,

  - backport fix from 1.6.3 to register file-based ccaches     created with the krb5_cc_new_unique function with the     global list, so that we don't crash when we go to close     the ccache (#468729)

An input validation flaw was found in the ASN.1 (Abstract Syntax Notation One) decoder used by MIT Kerberos. A remote attacker could use this flaw to crash a network service using the MIT Kerberos library, such as kadmind or krb5kdc, by causing it to dereference or free an uninitialized pointer. (CVE-2009-0846)

Multiple input validation flaws were found in the MIT Kerberos GSS-API library's implementation of the SPNEGO mechanism. A remote attacker could use these flaws to crash any network service utilizing the MIT Kerberos GSS-API library to authenticate users or, possibly, leak portions of the service's memory. (CVE-2009-0844, CVE-2009-0845)

The spnego_gss_accept_sec_context function in lib/gssapi/spnego/spnego_mech.c in MIT Kerberos 5 (aka krb5) 1.6.3, when SPNEGO is used, allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via invalid ContextFlags data in the reqFlags field in a negTokenInit token (CVE-2009-0845).

This update provides the fix for that security issue.

a. Service Console package krb5 update

   Kerberos is a network authentication protocol. It is designed to    provide strong authentication for client/server applications by    using secret-key cryptography.

   An input validation flaw in the asn1_decode_generaltime function in    MIT Kerberos 5 before 1.6.4 allows remote attackers to cause a    denial of service or possibly execute arbitrary code via vectors    involving an invalid DER encoding that triggers a free of an    uninitialized pointer.

   A remote attacker could use this flaw to crash a network service    using the MIT Kerberos library, such as kadmind or krb5kdc, by    causing it to dereference or free an uninitialized pointer or,    possibly, execute arbitrary code with the privileges of the user    running the service.

   NOTE: ESX by default is unaffected by this issue, the daemons    kadmind and krb5kdc are not installed in ESX.

   The Common Vulnerabilities and Exposures project (cve.mitre.org)    has assigned the name CVE-2009-0846 to this issue.

   In addition the ESX 4.0 Service Console krb5 package was also    updated for CVE-2009-0845, and CVE-2009-0844 and RHBA-2009-0135.

   MIT Kerberos versions 5 1.5 through 1.6.3 might allow remote    attackers to cause a denial of service by using invalid    ContextFlags data in the reqFlags field in a negTokenInit token.

   The Common Vulnerabilities and Exposures Project (cve.mitre.org)    has assigned the name CVE-2009-0845 to this issue.

   MIT Kerberos 5 before version 1.6.4 might allow remote attackers to    cause a denial of service or possibly execute arbitrary code by    using vectors involving an invalid DER encoding that triggers a    free of an uninitialized pointer.

   The Common Vulnerabilities and Exposures Project (cve.mitre.org)    has assigned the name CVE-2009-0846 to this issue.

   For ESX 4.0, 3.5, 3.0.3 the Service Console package pam_krb5 has    also been upgraded.  For details on the non-security issues that    this upgrade addresses, refer to the respective KB article listed    in section 4 below.

From Red Hat Security Advisory 2009:0410 :

Updated krb5 packages that fix a security issue are now available for Red Hat Enterprise Linux 2.1 and 3.

This update has been rated as having critical security impact by the Red Hat Security Response Team.

Kerberos is a network authentication system which allows clients and servers to authenticate to each other using symmetric encryption and a trusted third party, the Key Distribution Center (KDC).

An input validation flaw was found in the ASN.1 (Abstract Syntax Notation One) decoder used by MIT Kerberos. A remote attacker could use this flaw to crash a network service using the MIT Kerberos library, such as kadmind or krb5kdc, by causing it to dereference or free an uninitialized pointer or, possibly, execute arbitrary code with the privileges of the user running the service. (CVE-2009-0846)

All krb5 users should upgrade to these updated packages, which contain a backported patch to correct this issue. All running services using the MIT Kerberos libraries must be restarted for the update to take effect.

Updated krb5 packages that fix a security issue are now available for Red Hat Enterprise Linux 2.1 and 3.

This update has been rated as having critical security impact by the Red Hat Security Response Team.

Kerberos is a network authentication system which allows clients and servers to authenticate to each other using symmetric encryption and a trusted third party, the Key Distribution Center (KDC).

An input validation flaw was found in the ASN.1 (Abstract Syntax Notation One) decoder used by MIT Kerberos. A remote attacker could use this flaw to crash a network service using the MIT Kerberos library, such as kadmind or krb5kdc, by causing it to dereference or free an uninitialized pointer or, possibly, execute arbitrary code with the privileges of the user running the service. (CVE-2009-0846)

All krb5 users should upgrade to these updated packages, which contain a backported patch to correct this issue. All running services using the MIT Kerberos libraries must be restarted for the update to take effect.

a. Service Console OS update for COS kernel

   This patch updates the service console kernel to fix multiple    security issues.

   The Common Vulnerabilities and Exposures project (cve.mitre.org)    has assigned the names CVE-2010-0415, CVE-2010-0307,    CVE-2010-0291, CVE-2010-0622, CVE-2010-1087, CVE-2010-1437, and    CVE-2010-1088 to these issues.

b. Likewise package updates

   Updates to the likewisekrb5, likewiseopenldap, likewiseopen,    and pamkrb5 packages address several security issues.

   The Common Vulnerabilities and Exposures project (cve.mitre.org)    has assigned the names CVE-2009-0844, CVE-2009-0845,    CVE-2009-0846, CVE-2009-4212, and CVE-2010-1321 to these issues.

Multiple vulnerabilities has been found and corrected in krb5 :

The get_input_token function in the SPNEGO implementation in MIT Kerberos 5 (aka krb5) 1.5 through 1.6.3 allows remote attackers to cause a denial of service (daemon crash) and possibly obtain sensitive information via a crafted length value that triggers a buffer over-read (CVE-2009-0844).

The spnego_gss_accept_sec_context function in lib/gssapi/spnego/spnego_mech.c in MIT Kerberos 5 (aka krb5) 1.5 through 1.6.3, when SPNEGO is used, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via invalid ContextFlags data in the reqFlags field in a negTokenInit token (CVE-2009-0845).

The asn1_decode_generaltime function in lib/krb5/asn.1/asn1_decode.c in the ASN.1 GeneralizedTime decoder in MIT Kerberos 5 (aka krb5) before 1.6.4 allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via vectors involving an invalid DER encoding that triggers a free of an uninitialized pointer (CVE-2009-0846).

The asn1buf_imbed function in the ASN.1 decoder in MIT Kerberos 5 (aka krb5) 1.6.3, when PK-INIT is used, allows remote attackers to cause a denial of service (application crash) via a crafted length value that triggers an erroneous malloc call, related to incorrect calculations with pointer arithmetic (CVE-2009-0847).

The updated packages have been patched to correct these issues.

Update :

Packages for 2008.0 are provided for Corporate Desktop 2008.0 customers

The remote host is affected by the vulnerability described in GLSA-200904-09 (MIT Kerberos 5: Multiple vulnerabilities)

    Multiple vulnerabilities have been reported in MIT Kerberos 5:
    A free() call on an uninitialized pointer in the ASN.1 decoder     when decoding an invalid encoding (CVE-2009-0846).
    A buffer     overread in the SPNEGO GSS-API application, reported by Apple Product     Security (CVE-2009-0844).
    A NULL pointer dereference in the     SPNEGO GSS-API application, reported by Richard Evans     (CVE-2009-0845).
    An incorrect length check inside an ASN.1     decoder leading to spurious malloc() failures (CVE-2009-0847).
  Impact :

    A remote unauthenticated attacker could exploit the first vulnerability     to cause a Denial of Service or, in unlikely circumstances, execute     arbitrary code on the host running krb5kdc or kadmind with root     privileges and compromise the Kerberos key database. Exploitation of     the other vulnerabilities might lead to a Denial of Service in kadmind,     krb5kdc, or other daemons performing authorization against Kerberos     that utilize GSS-API or an information disclosure.
  Workaround :

    There is no known workaround at this time.

From Red Hat Security Advisory 2009:0409 :

Updated krb5 packages that fix a security issue are now available for Red Hat Enterprise Linux 4.

This update has been rated as having important security impact by the Red Hat Security Response Team.

Kerberos is a network authentication system which allows clients and servers to authenticate to each other using symmetric encryption and a trusted third party, the Key Distribution Center (KDC).

An input validation flaw was found in the ASN.1 (Abstract Syntax Notation One) decoder used by MIT Kerberos. A remote attacker could use this flaw to crash a network service using the MIT Kerberos library, such as kadmind or krb5kdc, by causing it to dereference or free an uninitialized pointer. (CVE-2009-0846)

All krb5 users should upgrade to these updated packages, which contain a backported patch to correct this issue. All running services using the MIT Kerberos libraries must be restarted for the update to take effect.

Multiple flaws were discovered in the Kerberos GSS-API and ASN.1 routines that did not correctly handle certain requests. An unauthenticated remote attacker could send specially crafted traffic to crash services using the Kerberos library, leading to a denial of service.

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Clients sending negotiation requests with invalid flags could crash the kerberos server (CVE-2009-0845).

GSS-API clients could crash when reading from an invalid address space (CVE-2009-0844).

Invalid length checks could crash applications using the kerberos ASN.1 parser (CVE-2009-0847).

Under certain circumstances the ASN.1 parser could free an uninitialized pointer which could crash a kerberos server or even lead to execution of arbitrary code (CVE-2009-0846).

Updated krb5 packages that fix various security issues are now available for Red Hat Enterprise Linux 5.

This update has been rated as having important security impact by the Red Hat Security Response Team.

Kerberos is a network authentication system which allows clients and servers to authenticate to each other using symmetric encryption and a trusted third party, the Key Distribution Center (KDC). The Generic Security Service Application Program Interface (GSS-API) definition provides security services to callers (protocols) in a generic fashion. The Simple and Protected GSS-API Negotiation (SPNEGO) mechanism is used by GSS-API peers to choose from a common set of security mechanisms.

An input validation flaw was found in the ASN.1 (Abstract Syntax Notation One) decoder used by MIT Kerberos. A remote attacker could use this flaw to crash a network service using the MIT Kerberos library, such as kadmind or krb5kdc, by causing it to dereference or free an uninitialized pointer. (CVE-2009-0846)

Multiple input validation flaws were found in the MIT Kerberos GSS-API library's implementation of the SPNEGO mechanism. A remote attacker could use these flaws to crash any network service utilizing the MIT Kerberos GSS-API library to authenticate users or, possibly, leak portions of the service's memory. (CVE-2009-0844, CVE-2009-0845)

All krb5 users should upgrade to these updated packages, which contain backported patches to correct these issues. All running services using the MIT Kerberos libraries must be restarted for the update to take effect.

The Rocky Linux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-2026_0439 advisory.

    This advisory aggregates security fixes for the krb5 SRPM in CIQ LTS 9.2. It addresses 74 CVEs:
    CVE-2008-0947, CVE-2016-3120, CVE-2012-1014, CVE-2017-15088, CVE-2014-9422, and 69 more.

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名稱	產品	系列	已發布	已更新	嚴重性
284452	MiracleLinux 3 : krb5-1.6.1-31AXS3.3 (AXSA:2009-41:01)	Nessus	Miracle Linux Local Security Checks	2026/1/14	2026/1/14	high
79452	OracleVM 2.1 : krb5 (OVMSA-2009-0003)	Nessus	OracleVM Local Security Checks	2014/11/26	2021/1/14	critical
60564	Scientific Linux Security Update : krb5 on SL4.x, SL5.x i386/x86_64	Nessus	Scientific Linux Local Security Checks	2012/8/1	2021/1/14	critical
36535	Mandriva Linux Security Advisory : krb5 (MDVSA-2009:082)	Nessus	Mandriva Local Security Checks	2009/4/23	2021/1/6	medium
40393	VMSA-2009-0008 : ESX Service Console update for krb5	Nessus	VMware ESX Local Security Checks	2009/7/27	2021/1/6	critical
67838	Oracle Linux 3 : krb5 (ELSA-2009-0410)	Nessus	Oracle Linux Local Security Checks	2013/7/12	2021/1/14	critical
36107	CentOS 3 : krb5 (CESA-2009:0410)	Nessus	CentOS Local Security Checks	2009/4/8	2021/1/4	critical
50611	VMSA-2010-0016 : VMware ESXi and ESX third-party updates for Service Console and Likewise components	Nessus	VMware ESX Local Security Checks	2010/11/16	2021/1/6	critical
38191	Mandriva Linux Security Advisory : krb5 (MDVSA-2009:098-1)	Nessus	Mandriva Local Security Checks	2009/4/28	2021/1/6	critical
36137	GLSA-200904-09 : MIT Kerberos 5: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	2009/4/11	2021/1/6	critical
67837	Oracle Linux 4 : krb5 (ELSA-2009-0409)	Nessus	Oracle Linux Local Security Checks	2013/7/12	2021/1/14	critical
37819	Ubuntu 6.06 LTS / 7.10 / 8.04 LTS / 8.10 : krb5 vulnerabilities (USN-755-1)	Nessus	Ubuntu Local Security Checks	2009/4/23	2021/1/19	critical
40017	openSUSE Security Update : krb5 (krb5-740)	Nessus	SuSE Local Security Checks	2009/7/21	2021/1/14	critical
40253	openSUSE Security Update : krb5 (krb5-740)	Nessus	SuSE Local Security Checks	2009/7/21	2021/1/14	critical
43739	CentOS 5 : krb5 (CESA-2009:0408)	Nessus	CentOS Local Security Checks	2010/1/6	2021/1/4	critical
355341	Rocky Linux 9.2 [CIQ] Security Update: krb5-devel / krb5-libs / krb5-libs-debuginfo / krb5-pkinit / etc Multiple Vulnerabilities (ciqsa-2026_0439)	Nessus	Rocky Linux Local Security Checks	2026/10/1	2026/10/13	critical

偵測

搜尋 Plugin

high

critical

critical

medium

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical