We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
A memory leak can be triggered when parsing usernames which can trigger a denial-of-service.
The domain portion of a username may be overridden causing an allocated memory area the size of the domain name to be leaked.
An attacker can leak memory can leak memory via the main gss_accept_sec_context entry point, potentially causing a denial-of-service.
gss_accept_sec_context
philipturnbull Reporter
Summary
A memory leak can be triggered when parsing usernames which can trigger a denial-of-service.
Details
The domain portion of a username may be overridden causing an allocated memory area the size of the domain name to be leaked.
Impact
An attacker can leak memory can leak memory via the main
gss_accept_sec_contextentry point, potentially causing a denial-of-service.