Red Hat Security Advisory

RHSA-2023:2570

krb5 security, bug fix, and enhancement update

Released 2023-05-09 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 9) krb5-devel-1.20.1-8.el9
Red Hat Enterprise Linux BaseOS (v. 9) krb5-1.20.1-8.el9, krb5-libs-1.20.1-8.el9, krb5-pkinit-1.20.1-8.el9 +4

Fixes 1 record

TI-2020-13032 CVE-2020-17049 · GHSA-g2p3-j47p-8cwj

Kerberos KDC Security Feature Bypass Vulnerability

MEDIUM 49

A security feature bypass vulnerability exists in the way Key Distribution Center (KDC) determines if a service ticket can be used for delegation via Kerberos Constrained Delegation (KCD).

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.13794 Published 2020-11-11 Partial fix · 10.0.17763.2061, publication +6 CWE-863