2830 matches found
EulerOS 2.0 SP9 : krb5 (EulerOS-SA-2021-1029)
According to the version of the krb5 packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - MIT Kerberos 5 aka krb5 before 1.17.2 and 1.18.x before 1.18.3 allows unbounded recursion via an ASN.1-encoded Kerberos message because the...
Security Bulletin: Vulnerability in ksu affects AIX (CVE-2020-4829)
Summary There is a vulnerability in the ksu user command that affects AIX. Vulnerability Details CVEID: CVE-2020-4829 DESCRIPTION: IBM AIX could allow a local user to exploit a vulnerability in the ksu user command to gain root privileges. CVSS Base score: 8.4 CVSS Temporal Score: See:...
SUSE SLED15 / SLES15 Security Update : krb5 (SUSE-SU-2020:3377-1)
This update for krb5 fixes the following security issue : CVE-2020-28196: Fixed an unbounded recursion via an ASN.1-encoded Kerberos message bsc1178512. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted...
SUSE SLES15 Security Update : krb5 (SUSE-SU-2020:3375-1)
This update for krb5 fixes the following security issue : CVE-2020-28196: Fixed an unbounded recursion via an ASN.1-encoded Kerberos message bsc1178512. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted...
SUSE SLES12 Security Update : krb5 (SUSE-SU-2020:3379-1)
This update for krb5 fixes the following security issue : CVE-2020-28196: Fixed an unbounded recursion via an ASN.1-encoded Kerberos message bsc1178512. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted...
NewStart CGSL CORE 5.05 / MAIN 5.05 : krb5 Vulnerability (NS-SA-2020-0103)
The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has krb5 packages installed that are affected by a vulnerability: - A Reachable Assertion issue was discovered in the KDC in MIT Kerberos 5 aka krb5 before 1.17. If an attacker can obtain a krbtgt ticket using an older encrypti...
openSUSE Security Update : krb5 (openSUSE-2020-2037)
This update for krb5 fixes the following security issue : - CVE-2020-28196: Fixed an unbounded recursion via an ASN.1-encoded Kerberos message bsc1178512. This update was imported from the SUSE:SLE-15-SP1:Update update project. C Tenable Network Security, Inc. The descriptive text and package...
openSUSE Security Update : krb5 (openSUSE-2020-2062)
This update for krb5 fixes the following security issue : - CVE-2020-28196: Fixed an unbounded recursion via an ASN.1-encoded Kerberos message bsc1178512. This update was imported from the SUSE:SLE-15-SP1:Update update project. C Tenable Network Security, Inc. The descriptive text and package...
Security update for krb5 (moderate)
openSUSE Security Update: Security update for krb5 Announcement ID: openSUSE-SU-2020:2062-1 Rating: moderate References: 1178512 Cross-References: CVE-2020-28196 Affected Products: openSUSE Leap 15.2 An update that fixes one vulnerability is now available. Description: This update for krb5 fixes...
OPENSUSE-SU-2020:2037-1 Security update for krb5
This update for krb5 fixes the following security issue: - CVE-2020-28196: Fixed an unbounded recursion via an ASN.1-encoded Kerberos message bsc1178512. This update was imported from the SUSE:SLE-15-SP1:Update update project...
Security update for krb5 (moderate)
openSUSE Security Update: Security update for krb5 Announcement ID: openSUSE-SU-2020:2037-1 Rating: moderate References: 1178512 Cross-References: CVE-2020-28196 Affected Products: openSUSE Leap 15.1 An update that fixes one vulnerability is now available. Description: This update for krb5 fixes...
Denial Of Service
krb5is vulnerable to denial of service. The vulnerability exists because lib/krb5/asn.1/asn1encode.c support for indefinite length allows for an unbounded recursion...
Security fix for the ALT Linux 9 package krb5 version 1.17.2-alt1
1.17.2-alt1 built Nov. 24, 2020 Ivan A. Melnikov in task 262110 Nov. 19, 2020 Ivan A. Melnikov - 1.17.2 Fixes: CVE-2020-28196...
Fedora 31 : krb5 (2020-0df38b2843)
Fix CVE-2020-28196 DoS in ASN.1 parsing due to missing recursion depth checks - fc32 + fc33 only: pull-up to rawhide Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and...
Debian DSA-4795-1 : krb5 - security update
Demi Obeneour discovered that unbounded recursion in the ASN1 parser of libkrb5 could result in denial of service. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-4795. The text itself is copyright C Software...
Debian: Security Advisory (DSA-4795-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] [DSA 4795-1] krb5 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4795-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff November 21, 2020 https://www.debian.org/security/faq -...
DSA-4795-1 krb5 - security update
Bulletin has no description...