Red Hat Security AdvisoryRHSA-2021:3576
krb5 security update
Released 2021-09-21 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux BaseOS (v. 8) krb5-1.18.2-8.3.el8_4, krb5-devel-1.18.2-8.3.el8_4, krb5-libs-1.18.2-8.3.el8_4 +5
Fixes 2 records
Priority MEDIUM 46
ec_verify in kdc/kdc_preauth_ec.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.18.4 and 1.19.x before 1.19.2 allows remote attackers to cause a NULL pointer dereference and daemon crash.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.10509 · Published 2021-07-22 · Partial fix CWE-476
Priority LOW 34
The Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.18.5 and 1.19.x before 1.19.3 has a NULL pointer dereference in kdc/do_tgs_req.c via a FAST inner body that lacks a server field.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.02505 · Published 2021-08-23 · Fixed CWE-476
