Red Hat Security AdvisoryRHSA-2022:8640
krb5 security update
Released 2022-11-28 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) krb5-1.15.1-55.el7_9, krb5-libs-1.15.1-55.el7_9, krb5-pkinit-1.15.1-55.el7_9 +2
- Red Hat Enterprise Linux Client Optional (v. 7) krb5-devel-1.15.1-55.el7_9, krb5-server-1.15.1-55.el7_9, krb5-server-ldap-1.15.1-55.el7_9
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) krb5-devel-1.15.1-55.el7_9, krb5-server-1.15.1-55.el7_9, krb5-server-ldap-1.15.1-55.el7_9
- Red Hat Enterprise Linux Server (v. 7) krb5-1.15.1-55.el7_9, krb5-devel-1.15.1-55.el7_9, krb5-devel-1.15.1-55.el7_9.ppc +8
- Red Hat Enterprise Linux Workstation (v. 7) krb5-1.15.1-55.el7_9, krb5-devel-1.15.1-55.el7_9, krb5-libs-1.15.1-55.el7_9 +5
Fixes 1 record
Priority MEDIUM 50
PAC parsing in MIT Kerberos 5 (aka krb5) before 1.19.4 and 1.20.x before 1.20.1 has integer overflows that may lead to remote code execution (in KDC, kadmind, or a GSS or Kerberos application server) on 32-bit platforms…
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.06858 · Published 2022-12-25 · Fixed CWE-190
