Red Hat Security AdvisoryRHSA-2024:8791
krb5 security update
Released 2024-11-04 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux BaseOS AUS (v.8.4) krb5-1.18.2-9.el8_4.2, krb5-devel-1.18.2-9.el8_4.2, krb5-libs-1.18.2-9.el8_4.2 +5
- Red Hat Enterprise Linux BaseOS E4S (v.8.4) krb5-1.18.2-9.el8_4.2, krb5-devel-1.18.2-9.el8_4.2, krb5-libs-1.18.2-9.el8_4.2 +5
- Red Hat Enterprise Linux BaseOS TUS (v.8.4) krb5-1.18.2-9.el8_4.2, krb5-devel-1.18.2-9.el8_4.2, krb5-libs-1.18.2-9.el8_4.2 +5
Fixes 1 record
Priority MEDIUM 57
RADIUS Protocol under RFC 2865 is susceptible to forgery attacks by a local attacker who can modify any valid Response (Access-Accept, Access-Reject, or Access-Challenge) to any other response using a chosen-prefix colli…
CVSS 3.1CRITICAL 9.0· Network · No auth · No interaction · EPSS 0.14859 · Published 2024-07-09 · Partial fix CWE-354
