nvd-json-data-feeds/CVE-2024/CVE-2024-373xx/CVE-2024-37370.json

{
  "id": "CVE-2024-37370",
  "sourceIdentifier": "cve@mitre.org",
  "published": "2024-06-28T22:15:02.293",
  "lastModified": "2024-07-01T12:37:24.220",
  "vulnStatus": "Awaiting Analysis",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "In MIT Kerberos 5 (aka krb5) before 1.21.3, an attacker can modify the plaintext Extra Count field of a confidential GSS krb5 wrap token, causing the unwrapped token to appear truncated to the application."
    },
    {
      "lang": "es",
      "value": "En MIT Kerberos 5 (tambi\u00e9n conocido como krb5) anterior a 1.21.3, un atacante puede modificar el campo Extra Count de texto plano de un token de envoltura GSS krb5 confidencial, lo que hace que el token desenvuelto aparezca truncado para la aplicaci\u00f3n."
    }
  ],
  "metrics": {},
  "references": [
    {
      "url": "https://github.com/krb5/krb5/commit/55fbf435edbe2e92dd8101669b1ce7144bc96fef",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://web.mit.edu/kerberos/www/advisories/",
      "source": "cve@mitre.org"
    }
  ]
}