Red Hat Security AdvisoryRHSA-2016:0532
krb5 security update
Released 2016-03-31 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) krb5-1.13.2-12.el7_2, krb5-libs-1.13.2-12.el7_2, krb5-pkinit-1.13.2-12.el7_2 +1
- Red Hat Enterprise Linux Client Optional (v. 7) krb5-devel-1.13.2-12.el7_2, krb5-server-1.13.2-12.el7_2, krb5-server-ldap-1.13.2-12.el7_2
- Red Hat Enterprise Linux ComputeNode (v. 7) krb5-1.13.2-12.el7_2, krb5-libs-1.13.2-12.el7_2, krb5-pkinit-1.13.2-12.el7_2 +1
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) krb5-devel-1.13.2-12.el7_2, krb5-server-1.13.2-12.el7_2, krb5-server-ldap-1.13.2-12.el7_2
- Red Hat Enterprise Linux Server (v. 7) krb5-1.13.2-12.el7_2, krb5-devel-1.13.2-12.el7_2, krb5-devel-1.13.2-12.el7_2.ppc +6
- Red Hat Enterprise Linux Workstation (v. 7) krb5-1.13.2-12.el7_2, krb5-devel-1.13.2-12.el7_2, krb5-libs-1.13.2-12.el7_2 +4
Fixes 3 records
Priority MEDIUM 40
The (1) kadm5_create_principal_3 and (2) kadm5_modify_principal functions in lib/kadm5/srv/svr_principal.c in kadmind in MIT Kerberos 5 (aka krb5) 1.12.x and 1.13.x before 1.13.4 and 1.14.x before 1.14.1 allow remote aut…
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.04327 · Published 2016-02-13 · Fixed
Priority LOW 36
Multiple memory leaks in kadmin/server/server_stubs.c in kadmind in MIT Kerberos 5 (aka krb5) before 1.13.4 and 1.14.x before 1.14.1 allow remote authenticated users to cause a denial of service (memory consumption) via…
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.04682 · Published 2016-02-13 · Partial fix CWE-772
Priority LOW 30
The xdr_nullstring function in lib/kadm5/kadm_rpc_xdr.c in kadmind in MIT Kerberos 5 (aka krb5) before 1.13.4 and 1.14.x before 1.14.1 does not verify whether '\0' characters exist as expected, which allows remote authen…
CVSS 3.1MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.03687 · Published 2016-02-13 · Partial fix CWE-125
THREATIST.IORead the docs