Fedora Update for krb5 FEDORA-2018-f97cb1c9b0

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Updated krb5 packages fix security vulnerabilities

Updated krb5 packages fix security vulnerabilities: An issue was discovered in MIT Kerberos 5 aka krb5 through 1.16. The pre-defined function "strlen" is getting a "NULL" string as a parameter value in plugins/kdb/ldap/libkdbldap/ldapprincipal2.c in the Key Distribution Center KDC, which allows...

MGASA-2018-0155 Updated krb5 packages fix security vulnerabilities

Updated krb5 packages fix security vulnerabilities: An issue was discovered in MIT Kerberos 5 aka krb5 through 1.16. The pre-defined function "strlen" is getting a "NULL" string as a parameter value in plugins/kdb/ldap/libkdbldap/ldapprincipal2.c in the Key Distribution Center KDC, which allows...

Fedora 27 : krb5 (2018-391a1f3e61)

Fix CVE-2018-5729, CVE-2018-5730. These are low-impact, requiring administrator access to exploit. ---- Fix leak in previous version. ---- Always read config snippets in alphabetical order per-directory. Note that Tenable Network Security has extracted the preceding description block directly fro...

Fedora Update for krb5 FEDORA-2018-391a1f3e61

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DLA-1265-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DLA-1058-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DLA-1265-1 : krb5 security update

Kerberos, a system for authenticating users and services on a network, was affected by several vulnerabilities. The Common Vulnerabilities and Exposures project identifies the following issues. CVE-2013-1418 Kerberos allows remote attackers to cause a denial of service NULL pointer dereference an...

DLA-1265-1 krb5 - security update

Bulletin has no description...

EulerOS 2.0 SP2 : krb5 (EulerOS-SA-2018-1008)

According to the version of the krb5 packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - plugins/preauth/pkinit/pkinitcryptoopenssl.c in MIT Kerberos 5 aka krb5 through 1.15.2 mishandles Distinguished Name DN fields, which allows remote...

EulerOS 2.0 SP1 : krb5 (EulerOS-SA-2018-1007)

According to the version of the krb5 packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - plugins/preauth/pkinit/pkinitcryptoopenssl.c in MIT Kerberos 5 aka krb5 through 1.15.2 mishandles Distinguished Name DN fields, which allows remote...

CVE-2018-5710

An issue was discovered in MIT Kerberos 5 aka krb5 through 1.16. The pre-defined function "strlen" is getting a "NULL" string as a parameter value in plugins/kdb/ldap/libkdbldap/ldapprincipal2.c in the Key Distribution Center KDC, which allows remote authenticated users to cause a denial of servi...

CVE-2018-5710

An issue was discovered in MIT Kerberos 5 aka krb5 through 1.16. The pre-defined function "strlen" is getting a "NULL" string as a parameter value in plugins/kdb/ldap/libkdbldap/ldapprincipal2.c in the Key Distribution Center KDC, which allows remote authenticated users to cause a denial of servi...

CVE-2018-5710

MIT Kerberos 5 (krb5) up to 1.16 is affected by CVE-2018-5710 (along with CVE-2018-5729, CVE-2018-5730). The issue is in KDC’s plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c where a NULL string is passed to strlen, enabling a remote authenticated user to cause a denial of service via a modified k...

CVE-2018-5709

Technical details for CVE-2018-5709 are not provided in the connected documents; the available information comes only from the Initial Description.

Fedora 27 : krb5 (2017-2dd6c320a4)

Fix CVE-2017-15088 Buffer overflow in getmatchingdata ---- Remove build dependency on python-pyrad. It is only used on the test suite, and we gracefully skip the tests if it is not present. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora...

Critical Photon OS Security Update - PHSA-2017-0093

Updates of 'libvirt', 'linux', 'subversion', 'ncurses', 'apr', 'linux-esx', 'krb5' packages of Photon OS have been released...

Critical Photon OS Security Update - PHSA-2017-0007

Updates of 'libjpeg-turbo', 'krb5' packages of Photon OS have been released...

CentOS Update for libipa_hbac CESA-2017:3379 centos7

Check the version of libipahbac SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882813";...

CVE-2017-15088

plugins/preauth/pkinit/pkinitcryptoopenssl.c in MIT Kerberos 5 aka krb5 through 1.15.2 mishandles Distinguished Name DN fields, which allows remote attackers to execute arbitrary code or cause a denial of service buffer overflow and application crash in situations involving untrusted X.509 data,...