Project

General

Profile

Actions
Copy link

Security #8307

closed
OT PA

krb5: internal request/response buffering leads to quadratic complexity (7.0.x backport)

Security #8307: krb5: internal request/response buffering leads to quadratic complexity (7.0.x backport)

Added by OISF Ticketbot 3 months ago. Updated 11 days ago.

Status:
Closed
Priority:
Normal
Assignee:
Philippe Antoine
Target version:
7.0.15
Affected Versions:
Label:
CVE:
2026-31932
Git IDs:

4c51a74e2e3a06d352dcac5a720450a392c5c5b2

Severity:
HIGH
Disclosure Date:
GHSA:
GHSA-rp9m-jcpw-hggr

SB Updated by Shivani Bhardwaj 3 months ago Actions
Copy link
 #1

  • Subject changed from krb5: internal buffering with split_off(0) leads to quadratic complexity (7.0.x backport) to krb5: internal request/response buffering leads to quadratic complexity (7.0.x backport)

JI Updated by Jason Ish 3 months ago Actions
Copy link
 #2

  • Severity set to HIGH

JF Updated by Juliana Fajardini Reichow 2 months ago Actions
Copy link
 #3

  • Status changed from Assigned to In Review

PA Updated by Philippe Antoine 2 months ago Actions
Copy link
 #4

Also Gitlab 7.0.15: staging - v2

JF Updated by Juliana Fajardini Reichow 2 months ago Actions
Copy link
 #5

  • CVE set to 2026-31932

JF Updated by Juliana Fajardini Reichow 2 months ago Actions
Copy link
 #6

  • Status changed from In Review to Resolved

VJ Updated by Victor Julien 2 months ago Actions
Copy link
 #8

  • Git IDs updated (diff)

VJ Updated by Victor Julien 2 months ago Actions
Copy link
 #9

  • Status changed from Resolved to Closed

SB Updated by Shivani Bhardwaj about 2 months ago Actions
Copy link
 #10

  • Private changed from Yes to No

JI Updated by Jason Ish 11 days ago Actions
Copy link
 #11

  • GHSA set to GHSA-rp9m-jcpw-hggr
Actions
Copy link

Also available in: PDF Atom