Red Hat Security AdvisoryRHSA-2021:4788
krb5 security update
Released 2021-11-23 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) krb5-1.15.1-51.el7_9, krb5-libs-1.15.1-51.el7_9, krb5-pkinit-1.15.1-51.el7_9 +2
- Red Hat Enterprise Linux Client Optional (v. 7) krb5-devel-1.15.1-51.el7_9, krb5-server-1.15.1-51.el7_9, krb5-server-ldap-1.15.1-51.el7_9
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) krb5-devel-1.15.1-51.el7_9, krb5-server-1.15.1-51.el7_9, krb5-server-ldap-1.15.1-51.el7_9
- Red Hat Enterprise Linux Server (v. 7) krb5-1.15.1-51.el7_9, krb5-devel-1.15.1-51.el7_9, krb5-devel-1.15.1-51.el7_9.ppc +8
- Red Hat Enterprise Linux Workstation (v. 7) krb5-1.15.1-51.el7_9, krb5-devel-1.15.1-51.el7_9, krb5-libs-1.15.1-51.el7_9 +5
Fixes 1 record
Priority LOW 34
The Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.18.5 and 1.19.x before 1.19.3 has a NULL pointer dereference in kdc/do_tgs_req.c via a FAST inner body that lacks a server field.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.02505 · Published 2021-08-23 · Fixed CWE-476
