Red Hat Security AdvisoryRHSA-2014:1255
krb5 security update
Released 2014-09-17 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) krb5-1.6.1-80.el5_11, krb5-devel-1.6.1-80.el5_11, krb5-devel-1.6.1-80.el5_11.i386 +18
- Red Hat Enterprise Linux Desktop (v. 5 client) krb5-1.6.1-80.el5_11, krb5-libs-1.6.1-80.el5_11, krb5-libs-1.6.1-80.el5_11.i386 +2
- Red Hat Enterprise Linux Desktop Workstation (v. 5 client) krb5-1.6.1-80.el5_11, krb5-devel-1.6.1-80.el5_11, krb5-devel-1.6.1-80.el5_11.i386 +4
Fixes 1 record
Priority MEDIUM 48
Off-by-one error in the krb5_encode_krbsecretkey function in plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c in the LDAP KDB module in kadmind in MIT Kerberos 5 (aka krb5) 1.6.x through 1.11.x before 1.11.6 and 1.12.x bef…
CVSS 2.0HIGH 8.5· Network · Low privileges · Interaction — · EPSS 0.08085 · Published 2014-08-14 · Fixed CWE-189
