Red Hat Security AdvisoryRHSA-2009:0408
krb5 security update
Released 2009-04-07 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) krb5-1.6.1-31.el5_3.3, krb5-devel-1.6.1-31.el5_3.3, krb5-devel-1.6.1-31.el5_3.3.i386 +14
- Red Hat Enterprise Linux Desktop (v. 5 client) krb5-1.6.1-31.el5_3.3, krb5-libs-1.6.1-31.el5_3.3, krb5-libs-1.6.1-31.el5_3.3.i386 +2
- Red Hat Enterprise Linux Desktop Workstation (v. 5 client) krb5-1.6.1-31.el5_3.3, krb5-devel-1.6.1-31.el5_3.3, krb5-devel-1.6.1-31.el5_3.3.i386 +2
Fixes 3 records
Priority MEDIUM 54
The asn1_decode_generaltime function in lib/krb5/asn.1/asn1_decode.c in the ASN.1 GeneralizedTime decoder in MIT Kerberos 5 (aka krb5) before 1.6.4 allows remote attackers to cause a denial of service (daemon crash) or p…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.08898 · Published 2009-04-09 · Fixed CWE-824
Priority LOW 33
The get_input_token function in the SPNEGO implementation in MIT Kerberos 5 (aka krb5) 1.5 through 1.6.3 allows remote attackers to cause a denial of service (daemon crash) and possibly obtain sensitive information via a…
CVSS 2.0MEDIUM 5.8· Network · No auth · Interaction — · EPSS 0.04316 · Published 2009-04-09 · Fixed CWE-119
Priority LOW 31
The spnego_gss_accept_sec_context function in lib/gssapi/spnego/spnego_mech.c in MIT Kerberos 5 (aka krb5) 1.5 through 1.6.3, when SPNEGO is used, allows remote attackers to cause a denial of service (NULL pointer derefe…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.05628 · Published 2009-03-27 · Fixed CWE-20
THREATIST.IORead the docs