ROS-20240911-04

A vulnerability in the Kerberos network authentication protocol is associated with modification of the Extra Count open field of the confidential GSS krb5 shell token. Exploitation of the vulnerability allows an attacker acting remotely to affect the integrity and operation of the system. remotel...

CVE-2024-26458 affecting package krb5 for versions less than 1.19.4-3

CVE-2024-26458 affecting package krb5 for versions less than 1.19.4-3. A patched version of the package is available...

Photon OS 3.0: Krb5 PHSA-2024-3.0-0791

An update of the krb5 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-3.0-0791. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Krb5 PHSA-2024-5.0-0355

An update of the krb5 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-5.0-0355. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 4.0: Krb5 PHSA-2024-4.0-0679

An update of the krb5 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-4.0-0679. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

AlmaLinux 9 : krb5 (ALSA-2024:6166)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2024:6166 advisory. krb5: GSS message token handling CVE-2024-37371 krb5: GSS message token handling CVE-2024-37370 Tenable has extracted the preceding description block...

Critical Photon OS Security Update - PHSA-2024-3.0-0791

Updates of 'krb5' packages of Photon OS have been released...

RHEL 9 : krb5 (RHSA-2024:6166)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:6166 advisory. Kerberos is a network authentication system, which can improve the security of your network by eliminating the insecure practice of sending...

krb5 security update

1.21.1-2.0.1 - Fixed race condition in krb5setpassword Orabug: 33609767 1.21.1-2 - CVE-2024-37370 CVE-2024-37371 Fix vulnerabilities in GSS message token handling Resolves: RHEL-45401 RHEL-45390...

Oracle Linux 9 : krb5 (ELSA-2024-6166)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-6166 advisory. 1.21.1-2.0.1 - Fixed race condition in krb5setpassword Orabug: 33609767 1.21.1-2 - CVE-2024-37370 CVE-2024-37371 Fix vulnerabilities in GSS message tok...

Critical Photon OS Security Update - PHSA-2024-4.0-0679

Updates of 'krb5' packages of Photon OS have been released...

RHEL 8 : krb5 (RHSA-2024:5884)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:5884 advisory. Kerberos is a network authentication system, which can improve the security of your network by eliminating the insecure practice of sending...

Critical Photon OS Security Update - PHSA-2024-5.0-0355

Updates of 'krb5' packages of Photon OS have been released...

Huawei EulerOS: Security Advisory for krb5 (EulerOS-SA-2024-2273)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RHEL 8 : krb5 (RHSA-2024:5625)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:5625 advisory. Kerberos is a network authentication system, which can improve the security of your network by eliminating the insecure practice of sending...

RHEL 9 : krb5 (RHSA-2024:5630)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:5630 advisory. Kerberos is a network authentication system, which can improve the security of your network by eliminating the insecure practice of sending...

RHEL 9 : krb5 (RHSA-2024:5643)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:5643 advisory. Kerberos is a network authentication system, which can improve the security of your network by eliminating the insecure practice of sending...

RHSA-2005:567 Red Hat Security Advisory: krb5 security update

Bulletin has no description...

Medium: krb5

Issue Overview: krb5: GSS message token handling CVE-2024-37370 In MIT Kerberos 5 aka krb5 before 1.21.3, an attacker can cause invalid memory reads during GSS message token handling by sending message tokens with invalid length fields. CVE-2024-37371 Affected Packages: krb5 Issue Correction: Run...

Medium: krb5

Issue Overview: krb5: GSS message token handling CVE-2024-37370 In MIT Kerberos 5 aka krb5 before 1.21.3, an attacker can cause invalid memory reads during GSS message token handling by sending message tokens with invalid length fields. CVE-2024-37371 Affected Packages: krb5 Issue Correction: Run...