Red Hat Security AdvisoryRHSA-2009:0409
krb5 security update
Released 2009-04-07 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AS version 4 krb5-1.3.4-60.el4_7.2, krb5-devel-1.3.4-60.el4_7.2, krb5-devel-1.3.4-60.el4_7.2.i386 +14
- Red Hat Enterprise Linux Desktop version 4 krb5-1.3.4-60.el4_7.2, krb5-devel-1.3.4-60.el4_7.2, krb5-devel-1.3.4-60.el4_7.2.i386 +6
- Red Hat Enterprise Linux ES version 4 krb5-1.3.4-60.el4_7.2, krb5-devel-1.3.4-60.el4_7.2, krb5-devel-1.3.4-60.el4_7.2.i386 +10
- Red Hat Enterprise Linux WS version 4 krb5-1.3.4-60.el4_7.2, krb5-devel-1.3.4-60.el4_7.2, krb5-devel-1.3.4-60.el4_7.2.i386 +10
Fixes 1 record
Priority MEDIUM 54
The asn1_decode_generaltime function in lib/krb5/asn.1/asn1_decode.c in the ASN.1 GeneralizedTime decoder in MIT Kerberos 5 (aka krb5) before 1.6.4 allows remote attackers to cause a denial of service (daemon crash) or p…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.08898 · Published 2009-04-09 · Fixed CWE-824
