Red Hat Security AdvisoryRHSA-2011:0447
krb5 security update
Released 2011-04-14 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) krb5-1.8.2-3.el6_0.7, krb5-libs-1.8.2-3.el6_0.7, krb5-pkinit-openssl-1.8.2-3.el6_0.7 +1
- Red Hat Enterprise Linux Desktop Optional (v. 6) krb5-1.8.2-3.el6_0.7, krb5-devel-1.8.2-3.el6_0.7, krb5-server-1.8.2-3.el6_0.7 +1
- Red Hat Enterprise Linux HPC Node (v. 6) krb5-1.8.2-3.el6_0.7, krb5-libs-1.8.2-3.el6_0.7
- Red Hat Enterprise Linux HPC Node Optional (v. 6) krb5-1.8.2-3.el6_0.7, krb5-devel-1.8.2-3.el6_0.7, krb5-pkinit-openssl-1.8.2-3.el6_0.7 +3
- Red Hat Enterprise Linux Server (v. 6) krb5-1.8.2-3.el6_0.7, krb5-devel-1.8.2-3.el6_0.7, krb5-devel-1.8.2-3.el6_0.7.ppc +7
- Red Hat Enterprise Linux Workstation (v. 6) krb5-1.8.2-3.el6_0.7, krb5-devel-1.8.2-3.el6_0.7, krb5-libs-1.8.2-3.el6_0.7 +4
Fixes 1 record
Priority MEDIUM 62
The process_chpw_request function in schpw.c in the password-changing functionality in kadmind in MIT Kerberos 5 (aka krb5) 1.7 through 1.9 frees an invalid pointer, which allows remote attackers to execute arbitrary cod…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.20765 · Published 2011-04-15 · Fixed CWE-20
