Red Hat Security AdvisoryRHSA-2022:8648
krb5 security update
Released 2022-11-28 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux BaseOS AUS (v. 8.2) krb5-1.17-19.el8_2, krb5-devel-1.17-19.el8_2, krb5-libs-1.17-19.el8_2 +5
- Red Hat Enterprise Linux BaseOS E4S (v. 8.2) krb5-1.17-19.el8_2, krb5-devel-1.17-19.el8_2, krb5-libs-1.17-19.el8_2 +5
- Red Hat Enterprise Linux BaseOS TUS (v. 8.2) krb5-1.17-19.el8_2, krb5-devel-1.17-19.el8_2, krb5-libs-1.17-19.el8_2 +5
Fixes 1 record
Priority MEDIUM 50
PAC parsing in MIT Kerberos 5 (aka krb5) before 1.19.4 and 1.20.x before 1.20.1 has integer overflows that may lead to remote code execution (in KDC, kadmind, or a GSS or Kerberos application server) on 32-bit platforms…
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.06858 · Published 2022-12-25 · Fixed CWE-190
