Red Hat Security AdvisoryRHSA-2016:0493
krb5 security update
Released 2016-03-22 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) krb5-1.10.3-42z1.el6_7, krb5-libs-1.10.3-42z1.el6_7, krb5-pkinit-openssl-1.10.3-42z1.el6_7 +1
- Red Hat Enterprise Linux Desktop Optional (v. 6) krb5-devel-1.10.3-42z1.el6_7, krb5-server-1.10.3-42z1.el6_7, krb5-server-ldap-1.10.3-42z1.el6_7
- Red Hat Enterprise Linux HPC Node (v. 6) krb5-1.10.3-42z1.el6_7, krb5-libs-1.10.3-42z1.el6_7, krb5-pkinit-openssl-1.10.3-42z1.el6_7 +1
- Red Hat Enterprise Linux HPC Node Optional (v. 6) krb5-devel-1.10.3-42z1.el6_7, krb5-server-1.10.3-42z1.el6_7, krb5-server-ldap-1.10.3-42z1.el6_7
- Red Hat Enterprise Linux Server (v. 6) krb5-1.10.3-42z1.el6_7, krb5-devel-1.10.3-42z1.el6_7, krb5-devel-1.10.3-42z1.el6_7.ppc +7
- Red Hat Enterprise Linux Workstation (v. 6) krb5-1.10.3-42z1.el6_7, krb5-devel-1.10.3-42z1.el6_7, krb5-libs-1.10.3-42z1.el6_7 +4
Fixes 2 records
Priority LOW 36
Multiple memory leaks in kadmin/server/server_stubs.c in kadmind in MIT Kerberos 5 (aka krb5) before 1.13.4 and 1.14.x before 1.14.1 allow remote authenticated users to cause a denial of service (memory consumption) via…
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.04682 · Published 2016-02-13 · Partial fix CWE-772
Priority LOW 30
The xdr_nullstring function in lib/kadm5/kadm_rpc_xdr.c in kadmind in MIT Kerberos 5 (aka krb5) before 1.13.4 and 1.14.x before 1.14.1 does not verify whether '\0' characters exist as expected, which allows remote authen…
CVSS 3.1MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.03687 · Published 2016-02-13 · Partial fix CWE-125
