Red Hat Security Advisory

RHSA-2021:1593

krb5 security update

Released 2021-05-18 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux BaseOS (v. 8) krb5-1.18.2-8.el8, krb5-devel-1.18.2-8.el8, krb5-libs-1.18.2-8.el8 +5

Fixes 1 record

TI-2020-17132 CVE-2020-28196 · GHSA-2wgw-3mv7-47xf

MIT Kerberos 5 (aka krb5) before 1.17.2 and 1.18.x before 1.18.3 allows unbounded…

MEDIUM 46

MIT Kerberos 5 (aka krb5) before 1.17.2 and 1.18.x before 1.18.3 allows unbounded recursion via an ASN.1-encoded Kerberos message because the lib/krb5/asn.1/asn1_encode.c support for BER indefinite lengths lacks a recurs…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.04417 Published 2020-11-06 Partial fix CWE-674