Lucene search

Gentoo FoundationMGASA-2024-0253

HistoryJul 03, 2024 - 7:36 p.m.

Updated krb5 packages fix security vulnerabilities

2024-07-0319:36:28

Gentoo Foundation

advisories.mageia.org

krb5 packages

security vulnerabilities

plaintext extra count

gss krb5 wrap token

truncated

invalid memory reads

gss message token handling

cve-2024-37370

cve-2024-37371

unix

7.2 High

AI Score

Confidence

Low

JSON

Before 1.21.3, an attacker can modify the plaintext Extra Count field of a confidential GSS krb5 wrap token, causing the unwrapped token to appear truncated to the application. (CVE-2024-37370) Before 1.21.3, an attacker can cause invalid memory reads during GSS message token handling by sending message tokens with invalid length fields. (CVE-2024-37371)

OSVersionArchitecturePackageVersionFilename
Mageia9noarchkrb5< 1.20.1-1.2krb5-1.20.1-1.2.mga9

OS	Version	Architecture	Package	Version	Filename
Mageia	9	noarch	krb5	< 1.20.1-1.2	krb5-1.20.1-1.2.mga9

References

bugs.mageia.org/show_bug.cgi?id=33344

7.2 High

AI Score

Confidence

Low

JSON

Related for MGASA-2024-0253