CVE-2020-10595

Katalog CVE

CVSS 9.8 · Critical EPSS 4,8%

Kerentanan Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') pada pam-krb5 project pam-krb5, debian linux. Skor CVSS 3.1 9.8 (Critical) menurut NVD.

Deskripsi (NVD)

pam-krb5 before 4.9 has a buffer overflow that might cause remote code execution in situations involving supplemental prompting by a Kerberos library. It may overflow a buffer provided by the underlying Kerberos library by a single '\0' byte if an attacker responds to a prompt with an answer of a carefully chosen length. The effect may range from heap corruption to stack corruption depending on the structure of the underlying Kerberos library, with unknown effects but possibly including code execution. This code path is not used for normal authentication, but only when the Kerberos library does supplemental prompting, such as with PKINIT or when using the non-standard no_prompt PAM configuration option.

Rincian

Terbit di NVD

31 Maret 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

9.8 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

EPSS (30 hari)

4,8% peluang dieksploitasi; lebih tinggi dari 91,7% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• http://www.openwall.com/lists/oss-security/2020/03/31/1 mailing list · patch · advisory pihak ketiga
• https://github.com/rra/pam-krb5/commit/e7879e27a37119fad4faf133a9f70bdcdc75d760 patch · advisory pihak ketiga
• https://lists.debian.org/debian-lts-announce/2020/04/msg00000.html mailing list · advisory pihak ketiga
• https://www.debian.org/security/2020/dsa-4648 advisory pihak ketiga
• https://usn.ubuntu.com/4314-1/
• https://www.eyrie.org/~eagle/software/pam-krb5/security/2020-03-30.html