Red Hat Security AdvisoryRHSA-2009:0410
krb5 security update
Released 2009-04-07 · Red Hat rating Critical · View on Red Hat →
Fixed in
- Red Hat Desktop version 3 krb5-1.2.7-70, krb5-devel-1.2.7-70, krb5-devel-1.2.7-70.i386 +6
- Red Hat Enterprise Linux AS (Advanced Server) version 2.1 krb5-1.2.2-49, krb5-devel-1.2.2-49.i386, krb5-devel-1.2.2-49.ia64 +6
- Red Hat Enterprise Linux AS version 3 krb5-1.2.7-70, krb5-devel-1.2.7-70, krb5-devel-1.2.7-70.i386 +14
- Red Hat Enterprise Linux ES version 2.1 krb5-1.2.2-49, krb5-devel-1.2.2-49.i386, krb5-libs-1.2.2-49.i386 +2
- Red Hat Enterprise Linux ES version 3 krb5-1.2.7-70, krb5-devel-1.2.7-70, krb5-devel-1.2.7-70.i386 +10
- Red Hat Enterprise Linux WS version 2.1 krb5-1.2.2-49, krb5-devel-1.2.2-49.i386, krb5-libs-1.2.2-49.i386 +2
- Red Hat Enterprise Linux WS version 3 krb5-1.2.7-70, krb5-devel-1.2.7-70, krb5-devel-1.2.7-70.i386 +10
- Red Hat Linux Advanced Workstation 2.1 krb5-1.2.2-49, krb5-devel-1.2.2-49.ia64, krb5-libs-1.2.2-49.ia64 +2
Fixes 1 record
Priority MEDIUM 54
The asn1_decode_generaltime function in lib/krb5/asn.1/asn1_decode.c in the ASN.1 GeneralizedTime decoder in MIT Kerberos 5 (aka krb5) before 1.6.4 allows remote attackers to cause a denial of service (daemon crash) or p…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.08898 · Published 2009-04-09 · Fixed CWE-824
