Red Hat Security AdvisoryRHSA-2012:1131
krb5 security update
Released 2012-07-31 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) krb5-1.9-33.el6_3.2, krb5-libs-1.9-33.el6_3.2, krb5-pkinit-openssl-1.9-33.el6_3.2 +1
- Red Hat Enterprise Linux Desktop Optional (v. 6) krb5-1.9-33.el6_3.2, krb5-devel-1.9-33.el6_3.2, krb5-server-1.9-33.el6_3.2 +1
- Red Hat Enterprise Linux HPC Node (v. 6) krb5-1.9-33.el6_3.2, krb5-libs-1.9-33.el6_3.2, krb5-pkinit-openssl-1.9-33.el6_3.2 +1
- Red Hat Enterprise Linux HPC Node Optional (v. 6) krb5-1.9-33.el6_3.2, krb5-devel-1.9-33.el6_3.2, krb5-server-1.9-33.el6_3.2 +1
- Red Hat Enterprise Linux Server (v. 6) krb5-1.9-33.el6_3.2, krb5-devel-1.9-33.el6_3.2, krb5-devel-1.9-33.el6_3.2.ppc +7
- Red Hat Enterprise Linux Workstation (v. 6) krb5-1.9-33.el6_3.2, krb5-devel-1.9-33.el6_3.2, krb5-libs-1.9-33.el6_3.2 +4
Fixes 2 records
Priority MEDIUM 48
The kdc_handle_protected_negotiation function in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.8.x, 1.9.x before 1.9.5, and 1.10.x before 1.10.3 attempts to calculate a checksum before verifying that t…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.04814 · Published 2012-08-06 · Fixed CWE-20
Priority LOW 24
The check_1_6_dummy function in lib/kadm5/srv/svr_principal.c in kadmind in MIT Kerberos 5 (aka krb5) 1.8.x, 1.9.x, and 1.10.x before 1.10.2 allows remote authenticated administrators to cause a denial of service (NULL p…
CVSS 2.0MEDIUM 4.0· Network · Low privileges · Interaction — · EPSS 0.0308 · Published 2012-06-07 · Fixed
