Apple: >> Mac Os X Server >> 10.4.11 Security Vulnerabilities
Double free vulnerability in the gss_krb5int_make_seal_token_v3 function in lib/gssapi/krb5/k5sealv3.c in MIT Kerberos 5 (krb5) has unknown impact and attack vectors.
CVSS Score
6.9
EPSS Score
0.001
Published
2007-12-06
Perl-Compatible Regular Expression (PCRE) library before 7.3 backtracks too far when matching certain input bytes against some regex patterns in non-UTF-8 mode, which allows context-dependent attackers to obtain sensitive information or cause a denial of service (crash), as demonstrated by the "\X?\d" and "\P{L}?\d" patterns.
CVSS Score
6.4
EPSS Score
0.027
Published
2007-11-07
Page 30