EulerOS 2.0 SP3 : krb5 (EulerOS-SA-2019-2058)

According to the version of the krb5 packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Double free vulnerability in MIT Kerberos 5 aka krb5 allows attackers to have unspecified impact via vectors involving automatic deletion of security...

EulerOS 2.0 SP2 : krb5 (EulerOS-SA-2019-1848)

According to the version of the krb5 packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Double free vulnerability in MIT Kerberos 5 aka krb5 allows attackers to have unspecified impact via vectors involving automatic deletion of security...

CVE-2018-11462

Siemens SINUMERIK controllers (808D v4.7/v4.8, 828D v4.7, 840D sl v4.7/v4.8) are affected by CVE-2018-11462. A remote attacker could send a specially crafted authentication request to escalate privileges to an elevated user account (not root) with network access and no user interaction. Impact co...

Security Bulletin: IBM Tivoli Access Manager for e-business and IBM Security Access Manager releases are affected by a Kerberos vulnerability (CVE-2017-11462)

Summary IBM Tivoli Access Manager for e-business and IBM Security Access Manager have addressed the following vulnerability. Vulnerability Details CVEID: CVE-2017-11462 DESCRIPTION: A double free vulnerability in MIT Kerberos 5 aka krb5 has an unknown impact and attack vector involving automatic...

Security Bulletin: Vulnerabilities in krb5 affect IBM BladeCenter Advanced Management Module (AMM)

Summary IBM BladeCenter Advanced Management Module AMM has addressed the following vulnerabilities in krb5. Vulnerability Details CVEID: CVE-2018-5730 DESCRIPTION: MIT krb5 could allow a remote authenticated attacker to bypass security restrictions, caused by a flaw in the LDAP Kerberos database...

Security fix for the ALT Linux 8 package krb5 version 1.14.6-alt1.M80P.1

1.14.6-alt1.M80P.1 built May 3, 2018 Evgeny Sinelnikov in task 204403 April 17, 2018 Evgeny Sinelnikov - Update to latest security release of krb5-1.14 - Security fixes: + CVE-2017-11368 Fix a KDC denial of service vulnerability caused by unset status strings + CVE-2017-11462 Preserve GSS context...

Fedora 27 : krb5 (2017-7a22a80c7e)

Prevent applications from accidentally implementing CVE-2017-11462 double free if seccontext is copied. - fc26+: Add ccselect hostrealm module for ccache selection based on service hostname. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora...

FreeBSD : krb5 -- Multiple vulnerabilities (3f3837cc-48fb-4414-aa46-5b1c23c9feae)

MIT reports : CVE-2017-11368 : In MIT krb5 1.7 and later, an authenticated attacker can cause an assertion failure in krb5kdc by sending an invalid S4U2Self or S4U2Proxy request. CVE-2017-11462 : RFC 2744 permits a GSS-API implementation to delete an existing security context on a second or...

openSUSE Security Update : krb5 (openSUSE-2017-1145)

This update for krb5 fixes several issues. This security issue was fixed : - CVE-2017-11462: Prevent automatic security context deletion to prevent double-free bsc1056995 These non-security issues were fixed : - Set 'rdns' and 'dnscanonicalizehostname' to false in krb5.conf in order to improve...

SUSE SLED12 / SLES12 Security Update : krb5 (SUSE-SU-2017:2659-1)

This update for krb5 fixes several issues. This security issue was fixed : - CVE-2017-11462: Prevent automatic security context deletion to prevent double-free bsc1056995 The update package also includes non-security fixes. See advisory for details. Note that Tenable Network Security has extracte...

SUSE-SU-2017:2659-1 Security update for krb5

This update for krb5 fixes several issues. This security issue was fixed: - CVE-2017-11462: Prevent automatic security context deletion to prevent double-free bsc1056995 These non-security issues were fixed: - Set 'rdns' and 'dnscanonicalizehostname' to false in krb5.conf in order to improve clie...

[ASA-201710-8] krb5: multiple issues

Arch Linux Security Advisory ASA-201710-8 ========================================= Severity: High Date : 2017-10-05 CVE-ID : CVE-2017-11368 CVE-2017-11462 Package : krb5 Type : multiple issues Remote : Yes Link : https://security.archlinux.org/AVG-414 Summary ======= The package krb5 before...

Fedora Update for krb5 FEDORA-2017-56e23bc2b5

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2017-11462

Double free vulnerability in MIT Kerberos 5 aka krb5 allows attackers to have unspecified impact via vectors involving automatic deletion of security contexts on error...

CVE-2017-11462

CVE-2017-11462 is a reported double free vulnerability in MIT Kerberos 5 (krb5) with unspecified impact. The initial description states a double free allows attackers to cause unspecified effects via automatic deletion of security contexts on error. Connected documents reiterate the issue as a do...

Fedora 26 : krb5 (2017-10c74147f9)

Prevent applications from accidentally implementing CVE-2017-11462 double free if seccontext is copied. - fc26+: Add ccselect hostrealm module for ccache selection based on service hostname. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora...