Red Hat Security AdvisoryRHSA-2015:0794
krb5 security update
Released 2015-04-09 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) krb5-1.10.3-37.el6_6, krb5-libs-1.10.3-37.el6_6, krb5-pkinit-openssl-1.10.3-37.el6_6 +1
- Red Hat Enterprise Linux Desktop Optional (v. 6) krb5-devel-1.10.3-37.el6_6, krb5-server-1.10.3-37.el6_6, krb5-server-ldap-1.10.3-37.el6_6
- Red Hat Enterprise Linux HPC Node (v. 6) krb5-1.10.3-37.el6_6, krb5-libs-1.10.3-37.el6_6, krb5-pkinit-openssl-1.10.3-37.el6_6 +1
- Red Hat Enterprise Linux HPC Node Optional (v. 6) krb5-devel-1.10.3-37.el6_6, krb5-server-1.10.3-37.el6_6, krb5-server-ldap-1.10.3-37.el6_6
- Red Hat Enterprise Linux Server (v. 6) krb5-1.10.3-37.el6_6, krb5-devel-1.10.3-37.el6_6, krb5-devel-1.10.3-37.el6_6.ppc +7
- Red Hat Enterprise Linux Workstation (v. 6) krb5-1.10.3-37.el6_6, krb5-devel-1.10.3-37.el6_6, krb5-libs-1.10.3-37.el6_6 +4
Fixes 5 records
Priority MEDIUM 48
The auth_gssapi_unwrap_data function in lib/rpc/auth_gssapi_misc.c in MIT Kerberos 5 (aka krb5) through 1.11.5, 1.12.x through 1.12.2, and 1.13.x before 1.13.1 does not properly handle partial XDR deserialization, which…
CVSS 2.0HIGH 9.0· Network · Low privileges · Interaction — · EPSS 0.06213 · Published 2015-02-19 · Partial fix
Priority MEDIUM 48
The krb5_gss_process_context_token function in lib/gssapi/krb5/process_context_token.c in the libgssapi_krb5 library in MIT Kerberos 5 (aka krb5) through 1.11.5, 1.12.x through 1.12.2, and 1.13.x before 1.13.1 does not p…
CVSS 2.0HIGH 9.0· Network · Low privileges · Interaction — · EPSS 0.06213 · Published 2015-02-19 · Partial fix
Priority LOW 32
The check_rpcsec_auth function in kadmin/server/kadm_rpc_svc.c in kadmind in MIT Kerberos 5 (aka krb5) through 1.11.5, 1.12.x through 1.12.2, and 1.13.x before 1.13.1 allows remote authenticated users to bypass a kadmin/…
CVSS 2.0MEDIUM 6.1· Network · Low privileges · Interaction — · EPSS 0.02726 · Published 2015-02-19 · Partial fix CWE-284
Priority LOW 30
MIT Kerberos 5 (aka krb5) through 1.13.1 incorrectly expects that a krb5_read_message data field is represented as a string ending with a '\0' character, which allows remote attackers to (1) cause a denial of service (NU…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.04587 · Published 2015-02-20 · Partial fix
Priority LOW 25
The krb5_ldap_get_password_policy_from_dn function in plugins/kdb/ldap/libkdb_ldap/ldap_pwd_policy.c in MIT Kerberos 5 (aka krb5) before 1.13.1, when the KDC uses LDAP, allows remote authenticated users to cause a denial…
CVSS 2.0LOW 3.5· Network · Low privileges · Interaction — · EPSS 0.04968 · Published 2014-12-16 · Partial fix CWE-476
THREATIST.IORead the docs