krb5: denial of service flaws when handling RFC 1964 tokens

A buffer over-read flaw was found in the way MIT Kerberos handled certain requests. A remote, unauthenticated attacker who is able to inject packets into a client or server application's GSSAPI session could use this flaw to crash the application...

SuSE 11.3 Security Update : krb5 (SAT Patch Number 9564)

The following security issues have been fixed in kerberos 5 : - Two denial of service flaws when handling RFC 1964 tokens. CVE-2014-4341 / CVE-2014-4342 - Multiple flaws in SPNEGO. CVE-2014-4343 / CVE-2014-4344 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package...