Red Hat Security AdvisoryRHSA-2011:0356
krb5 security update
Released 2011-03-16 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) krb5-1.8.2-3.el6_0.6, krb5-libs-1.8.2-3.el6_0.6, krb5-pkinit-openssl-1.8.2-3.el6_0.6 +1
- Red Hat Enterprise Linux Desktop Optional (v. 6) krb5-1.8.2-3.el6_0.6, krb5-devel-1.8.2-3.el6_0.6, krb5-server-1.8.2-3.el6_0.6 +1
- Red Hat Enterprise Linux HPC Node (v. 6) krb5-1.8.2-3.el6_0.6, krb5-libs-1.8.2-3.el6_0.6
- Red Hat Enterprise Linux HPC Node Optional (v. 6) krb5-1.8.2-3.el6_0.6, krb5-devel-1.8.2-3.el6_0.6, krb5-pkinit-openssl-1.8.2-3.el6_0.6 +3
- Red Hat Enterprise Linux Server (v. 6) krb5-1.8.2-3.el6_0.6, krb5-devel-1.8.2-3.el6_0.6, krb5-devel-1.8.2-3.el6_0.6.ppc +7
- Red Hat Enterprise Linux Workstation (v. 6) krb5-1.8.2-3.el6_0.6, krb5-devel-1.8.2-3.el6_0.6, krb5-libs-1.8.2-3.el6_0.6 +4
Fixes 1 record
Priority MEDIUM 44
Double free vulnerability in the prepare_error_as function in do_as_req.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.7 through 1.9, when the PKINIT feature is enabled, allows remote attackers to…
CVSS 2.0HIGH 7.6· Network · No auth · Interaction — · EPSS 0.08267 · Published 2011-03-20 · Fixed CWE-399
