2789 matches found
Fedora 35 : heimdal (2022-cbbd105d08)
The remote Fedora 35 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-cbbd105d08 advisory. Fixes: Delay service starts until after network is online rhbz2005501 Restart services on package update will apply when updating from this release...
Fedora 35 : krb5 (2022-88cefef88c)
The remote Fedora 35 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-88cefef88c advisory. Security fix for CVE-2022-42898 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus h...
Fedora 36 : krb5 (2022-78038a4441)
The remote Fedora 36 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-78038a4441 advisory. Security fix for CVE-2022-42898 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus h...
Mageia: Security Advisory (MGASA-2022-0467)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Updated krb5 packages fix security vulnerability
Greg Hudson discovered integer overflow flaws in the PAC parsing in krb5, the MIT implementation of Kerberos, which may result in remote code execution in a KDC, kadmin, or GSS or Kerberos application server process, information exposure to a cross-realm KDC acting maliciously, or denial of servi...
Security Bulletin: Multiple Vulnerabilities in base image packages affect IBM Voice Gateway
Summary Security Vulnerabilities in base image packages affect IBM Voice Gateway. The vulnerabilities have been addressed. Vulnerability Details CVEID:CVE-2022-37434 DESCRIPTION: zlib is vulnerable to a heap-based buffer overflow, caused by improper bounds checking by inflate in inflate.c. By usi...
krb5: Fix of CVE-2022-42898
CVE-2022-42898: Fix integer overflows in PAC parsing - A test-suite was activated...
Rocky Linux 8 : krb5 (RLSA-2022:8638)
The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2022:8638 advisory. - PAC parsing in MIT Kerberos 5 aka krb5 before 1.19.4 and 1.20.x before 1.20.1 has integer overflows that may lead to remote code execution in KDC, kadmind, or ...
SUSE: Security Advisory (SUSE-SU-2022:4335-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE SLES12: krb5 / krb5-32bit / krb5-client / krb5-devel / krb5-doc / etc (SUSE-SU-2022:4335-1)
The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:4335-1 advisory. - CVE-2022-42898: Fixed integer overflow in PAC parsing bsc1205126. Tenable has extracted the preceding description block directly from the...
SUSE-SU-2022:4335-1 Security update for krb5
This update for krb5 fixes the following issues: - CVE-2022-42898: Fixed integer overflow in PAC parsing bsc1205126...
RHEL 8 : krb5 (RHSA-2022:8638)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2022:8638 advisory. Kerberos is a network authentication system, which can improve the security of your network by eliminating the insecure practice of sending passwords...
CentOS: Security Advisory for krb5-devel (CESA-2022:8640)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
CentOS 7 : krb5 (RHSA-2022:8640)
The remote CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2022:8640 advisory. - PAC parsing in MIT Kerberos 5 aka krb5 before 1.19.4 and 1.20.x before 1.20.1 has integer overflows that may lead to remote code execution in KDC, kadmind, or...
Debian: Security Advisory (DLA-3213-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] [DLA 3213-1] krb5 security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-3213-1 [email protected] https://www.debian.org/lts/security/ Chris Lamb November 29, 2022 https://wiki.debian.org/LTS -...
Debian dla-3213 : krb5-admin-server - security update
The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3213 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3213-1 [email protected] https://www.debian.org/lts/security/...
Oracle Linux 9 : krb5 (ELSA-2022-8637)
The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-8637 advisory. - Fix integer overflows in PAC parsing CVE-2022-42898 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. No...
RHEL 6 : krb5 (RHSA-2022:8663)
The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2022:8663 advisory. Kerberos is a network authentication system, which can improve the security of your network by eliminating the insecure practice of sending passwords...
