Most recent entries from all https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 11 Oct 2026 05:22:35 +0000 CVE-2026-107778 — MIT krb5 through 1.22.2 NULL Pointer Dereference via krb5_rd_cred() https://db.gcve.eu/vuln/cve-2026-107778 <p><strong>Affected:</strong> MIT krb5</p> <p>MIT Kerberos 5 (krb5) through 1.22.2 contains a NULL pointer dereference in make_cred_list() in rd_cred.c that allows authenticated Kerberos clients to crash services by sending mismatched KRB-CRED arrays. Attackers can send forwarded credentials with more tickets than ticket_info entries through gss_accept_sec_context() to crash GSS-API acceptor services, causing denial of service.</p> <p><strong>Affected:</strong> MIT krb5</p> <p>MIT Kerberos 5 (krb5) through 1.22.2 contains a NULL pointer dereference in make_cred_list() in rd_cred.c that allows authenticated Kerberos clients to crash services by sending mismatched KRB-CRED arrays. Attackers can send forwarded credentials with more tickets than ticket_info entries through gss_accept_sec_context() to crash GSS-API acceptor services, causing denial of service.</p> https://db.gcve.eu/vuln/cve-2026-107778