Red Hat Security Advisory

RHSA-2022:8641

krb5 security update

Released 2022-11-28 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux BaseOS E4S (v. 8.1) krb5-1.17-10.el8_1, krb5-devel-1.17-10.el8_1, krb5-libs-1.17-10.el8_1 +5

Fixes 1 record

TI-2022-20894 CVE-2022-42898

PAC parsing in MIT Kerberos 5 (aka krb5) before 1.19.4 and 1.20.x before 1.20.1 has…

MEDIUM 50

PAC parsing in MIT Kerberos 5 (aka krb5) before 1.19.4 and 1.20.x before 1.20.1 has integer overflows that may lead to remote code execution (in KDC, kadmind, or a GSS or Kerberos application server) on 32-bit platforms…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.06858 Published 2022-12-25 Fixed CWE-190