Red Hat Security AdvisoryRHSA-2013:0942
krb5 security update
Released 2013-06-12 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) krb5-1.6.1-70.el5_9.2, krb5-devel-1.6.1-70.el5_9.2, krb5-devel-1.6.1-70.el5_9.2.i386 +18
- Red Hat Enterprise Linux Desktop (v. 6) krb5-1.10.3-10.el6_4.3, krb5-libs-1.10.3-10.el6_4.3, krb5-pkinit-openssl-1.10.3-10.el6_4.3 +1
- Red Hat Enterprise Linux Desktop Optional (v. 6) krb5-1.10.3-10.el6_4.3, krb5-devel-1.10.3-10.el6_4.3, krb5-server-1.10.3-10.el6_4.3 +1
- Red Hat Enterprise Linux HPC Node (v. 6) krb5-1.10.3-10.el6_4.3, krb5-libs-1.10.3-10.el6_4.3, krb5-pkinit-openssl-1.10.3-10.el6_4.3 +1
- Red Hat Enterprise Linux HPC Node Optional (v. 6) krb5-1.10.3-10.el6_4.3, krb5-devel-1.10.3-10.el6_4.3, krb5-server-1.10.3-10.el6_4.3 +1
- Red Hat Enterprise Linux Server (v. 6) krb5-1.10.3-10.el6_4.3, krb5-devel-1.10.3-10.el6_4.3, krb5-devel-1.10.3-10.el6_4.3.ppc +7
- Red Hat Enterprise Linux Workstation (v. 6) krb5-1.10.3-10.el6_4.3, krb5-devel-1.10.3-10.el6_4.3, krb5-libs-1.10.3-10.el6_4.3 +4
Fixes 1 record
Priority LOW 32
schpw.c in the kpasswd service in kadmind in MIT Kerberos 5 (aka krb5) before 1.11.3 does not properly validate UDP packets before sending responses, which allows remote attackers to cause a denial of service (CPU and ba…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.06183 · Published 2013-05-29 · Fixed CWE-20
