Kerberos 5 (aka krb5) 1.21.2 contains a memory leak in /krb5/src/lib/rpc/pmap_rmt.c.
References
| Link | Resource |
|---|---|
| https://github.com/LuMingYinDetect/krb5_defects/blob/main/krb5_detect_1.md | Exploit |
| https://security.netapp.com/advisory/ntap-20240415-0010/ | Third Party Advisory |
| https://github.com/LuMingYinDetect/krb5_defects/blob/main/krb5_detect_1.md | Exploit |
| https://security.netapp.com/advisory/ntap-20240415-0010/ | Third Party Advisory |
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
| AND |
|
Configuration 4 (hide)
| AND |
|
Configuration 5 (hide)
| AND |
|
History
23 May 2025, 15:39
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://github.com/LuMingYinDetect/krb5_defects/blob/main/krb5_detect_1.md - Exploit | |
| References | () https://security.netapp.com/advisory/ntap-20240415-0010/ - Third Party Advisory | |
| First Time |
Netapp cloud Volumes Ontap Mediator
Netapp h610s Firmware Netapp h610c Netapp h610s Netapp active Iq Unified Manager Netapp Netapp ontap Select Deploy Administration Utility Netapp h615c Netapp h610c Firmware Mit Netapp management Services For Element Software And Netapp Hci Netapp h615c Firmware Mit kerberos 5 Netapp ontap 9 |
|
| CWE | CWE-401 | |
| CPE | cpe:2.3:h:netapp:h610s:-:*:*:*:*:*:*:* cpe:2.3:h:netapp:h610c:-:*:*:*:*:*:*:* cpe:2.3:o:netapp:h615c_firmware:-:*:*:*:*:*:*:* cpe:2.3:a:netapp:management_services_for_element_software_and_netapp_hci:-:*:*:*:*:*:*:* cpe:2.3:a:netapp:ontap_select_deploy_administration_utility:-:*:*:*:*:*:*:* cpe:2.3:a:netapp:cloud_volumes_ontap_mediator:-:*:*:*:*:*:*:* cpe:2.3:a:netapp:ontap_9:-:*:*:*:*:*:*:* cpe:2.3:o:netapp:h610c_firmware:-:*:*:*:*:*:*:* cpe:2.3:h:netapp:h615c:-:*:*:*:*:*:*:* cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:* cpe:2.3:a:mit:kerberos_5:1.21.2:*:*:*:*:*:*:* cpe:2.3:o:netapp:h610s_firmware:-:*:*:*:*:*:*:* |
06 Dec 2024, 21:15
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.3 |
Information
Published : 2024-02-29 01:44
Updated : 2025-05-23 15:39
NVD link : CVE-2024-26458
Mitre link : CVE-2024-26458
CVE.ORG link : CVE-2024-26458
JSON object : View
Products Affected
netapp
- h610s
- h610s_firmware
- cloud_volumes_ontap_mediator
- h610c
- h615c_firmware
- ontap_select_deploy_administration_utility
- h615c
- active_iq_unified_manager
- ontap_9
- management_services_for_element_software_and_netapp_hci
- h610c_firmware
mit
- kerberos_5
CWE
CWE-401
Missing Release of Memory after Effective Lifetime