Red Hat Security Advisory

RHSA-2011:1379

krb5 security update

Released 2011-10-18 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Server (v. 6) krb5-1.9-9.el6_1.2, krb5-devel-1.9-9.el6_1.2, krb5-devel-1.9-9.el6_1.2.ppc +7

Fixes 3 records

TI-2011-01348 CVE-2011-1529 · GHSA-54mf-f57f-83fj

The lookup_lockout_policy function in the Key Distribution Center (KDC) in MIT Kerberos 5…

MEDIUM 41

The lookup_lockout_policy function in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.8 through 1.8.4 and 1.9 through 1.9.1, when the db2 (aka Berkeley DB) or LDAP back end is used, allows remote attacke…

CVSS 2.0HIGH 7.8 Network No auth Interaction — EPSS 0.04046 Published 2011-10-20 Fixed CWE-20

TI-2011-01347 CVE-2011-1528 · GHSA-hxvv-vjx9-wj2m

The krb5_ldap_lockout_audit function in the Key Distribution Center (KDC) in MIT Kerberos…

MEDIUM 41

The krb5_ldap_lockout_audit function in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.8 through 1.8.4 and 1.9 through 1.9.1, when the LDAP back end is used, allows remote attackers to cause a denial of…

CVSS 2.0HIGH 7.8 Network No auth Interaction — EPSS 0.04177 Published 2011-10-20 Fixed CWE-20

TI-2011-01346 CVE-2011-1527 · GHSA-848m-2rw5-f2f2

The kdb_ldap plugin in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.9…

MEDIUM 40

The kdb_ldap plugin in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.9 through 1.9.1, when the LDAP back end is used, allows remote attackers to cause a denial of service (NULL pointer dereference and…

CVSS 2.0HIGH 7.8 Network No auth Interaction — EPSS 0.03653 Published 2011-10-20 Fixed CWE-20