Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2008-0062 (GCVE-0-2008-0062)
Vulnerability from cvelistv5 – Published: 2008-03-19 10:00 – Updated: 2024-08-07 07:32
VLAI
EPSS
Summary
KDC in MIT Kerberos 5 (krb5kdc) does not set a global variable for some krb4 message types, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted messages that trigger a NULL pointer dereference or double-free.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
49 references
Date Public
2008-03-18 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T07:32:23.904Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "ADV-2008-1744",
"tags": [
"vdb-entry",
"x_refsource_VUPEN",
"x_transferred"
],
"url": "http://www.vupen.com/english/advisories/2008/1744"
},
{
"name": "29457",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/29457"
},
{
"name": "MDVSA-2008:069",
"tags": [
"vendor-advisory",
"x_refsource_MANDRIVA",
"x_transferred"
],
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:069"
},
{
"name": "29464",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/29464"
},
{
"name": "GLSA-200803-31",
"tags": [
"vendor-advisory",
"x_refsource_GENTOO",
"x_transferred"
],
"url": "http://www.gentoo.org/security/en/glsa/glsa-200803-31.xml"
},
{
"name": "FEDORA-2008-2637",
"tags": [
"vendor-advisory",
"x_refsource_FEDORA",
"x_transferred"
],
"url": "https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00537.html"
},
{
"name": "MDVSA-2008:071",
"tags": [
"vendor-advisory",
"x_refsource_MANDRIVA",
"x_transferred"
],
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:071"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://wiki.rpath.com/Advisories:rPSA-2008-0112"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5022542.html"
},
{
"name": "SSRT100495",
"tags": [
"vendor-advisory",
"x_refsource_HP",
"x_transferred"
],
"url": "http://marc.info/?l=bugtraq\u0026m=130497213107107\u0026w=2"
},
{
"name": "29451",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/29451"
},
{
"name": "29663",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/29663"
},
{
"name": "FEDORA-2008-2647",
"tags": [
"vendor-advisory",
"x_refsource_FEDORA",
"x_transferred"
],
"url": "https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00544.html"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0112"
},
{
"name": "29438",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/29438"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://www.vmware.com/security/advisories/VMSA-2008-0009.html"
},
{
"name": "oval:org.mitre.oval:def:9496",
"tags": [
"vdb-entry",
"signature",
"x_refsource_OVAL",
"x_transferred"
],
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9496"
},
{
"name": "ADV-2008-0924",
"tags": [
"vdb-entry",
"x_refsource_VUPEN",
"x_transferred"
],
"url": "http://www.vupen.com/english/advisories/2008/0924/references"
},
{
"name": "RHSA-2008:0164",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "http://www.redhat.com/support/errata/RHSA-2008-0164.html"
},
{
"name": "MDVSA-2008:070",
"tags": [
"vendor-advisory",
"x_refsource_MANDRIVA",
"x_transferred"
],
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:070"
},
{
"name": "ADV-2008-0922",
"tags": [
"vdb-entry",
"x_refsource_VUPEN",
"x_transferred"
],
"url": "http://www.vupen.com/english/advisories/2008/0922/references"
},
{
"name": "29450",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/29450"
},
{
"name": "29435",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/29435"
},
{
"name": "krb5-kdc-code-execution(41275)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/41275"
},
{
"name": "1019626",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK",
"x_transferred"
],
"url": "http://www.securitytracker.com/id?1019626"
},
{
"name": "20080319 rPSA-2008-0112-1 krb5 krb5-server krb5-services krb5-test krb5-workstation",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://www.securityfocus.com/archive/1/489883/100/0/threaded"
},
{
"name": "29428",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/29428"
},
{
"name": "29420",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/29420"
},
{
"name": "DSA-1524",
"tags": [
"vendor-advisory",
"x_refsource_DEBIAN",
"x_transferred"
],
"url": "http://www.debian.org/security/2008/dsa-1524"
},
{
"name": "30535",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/30535"
},
{
"name": "APPLE-SA-2008-03-18",
"tags": [
"vendor-advisory",
"x_refsource_APPLE",
"x_transferred"
],
"url": "http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html"
},
{
"name": "RHSA-2008:0182",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "http://www.redhat.com/support/errata/RHSA-2008-0182.html"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5022520.html"
},
{
"name": "20080604 VMSA-2008-0009 Updates to VMware Workstation, VMware Player, VMware ACE, VMware Fusion, VMware Server, VMware VIX API, VMware ESX, VMware ESXi resolve critical security issues",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://www.securityfocus.com/archive/1/493080/100/0/threaded"
},
{
"name": "RHSA-2008:0180",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "http://www.redhat.com/support/errata/RHSA-2008-0180.html"
},
{
"name": "SUSE-SA:2008:016",
"tags": [
"vendor-advisory",
"x_refsource_SUSE",
"x_transferred"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00006.html"
},
{
"name": "29516",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/29516"
},
{
"name": "29462",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/29462"
},
{
"name": "29424",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/29424"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://docs.info.apple.com/article.html?artnum=307562"
},
{
"name": "RHSA-2008:0181",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "http://www.redhat.com/support/errata/RHSA-2008-0181.html"
},
{
"name": "29423",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/29423"
},
{
"name": "USN-587-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU",
"x_transferred"
],
"url": "http://www.ubuntu.com/usn/usn-587-1"
},
{
"name": "ADV-2008-1102",
"tags": [
"vdb-entry",
"x_refsource_VUPEN",
"x_transferred"
],
"url": "http://www.vupen.com/english/advisories/2008/1102/references"
},
{
"name": "28303",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/28303"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2008-001.txt"
},
{
"name": "20080318 MITKRB5-SA-2008-001: double-free, uninitialized data vulnerabilities in krb5kdc",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://www.securityfocus.com/archive/1/489761"
},
{
"name": "HPSBOV02682",
"tags": [
"vendor-advisory",
"x_refsource_HP",
"x_transferred"
],
"url": "http://marc.info/?l=bugtraq\u0026m=130497213107107\u0026w=2"
},
{
"name": "VU#895609",
"tags": [
"third-party-advisory",
"x_refsource_CERT-VN",
"x_transferred"
],
"url": "http://www.kb.cert.org/vuls/id/895609"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2008-03-18T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "KDC in MIT Kerberos 5 (krb5kdc) does not set a global variable for some krb4 message types, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted messages that trigger a NULL pointer dereference or double-free."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2018-10-15T20:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "ADV-2008-1744",
"tags": [
"vdb-entry",
"x_refsource_VUPEN"
],
"url": "http://www.vupen.com/english/advisories/2008/1744"
},
{
"name": "29457",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/29457"
},
{
"name": "MDVSA-2008:069",
"tags": [
"vendor-advisory",
"x_refsource_MANDRIVA"
],
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:069"
},
{
"name": "29464",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/29464"
},
{
"name": "GLSA-200803-31",
"tags": [
"vendor-advisory",
"x_refsource_GENTOO"
],
"url": "http://www.gentoo.org/security/en/glsa/glsa-200803-31.xml"
},
{
"name": "FEDORA-2008-2637",
"tags": [
"vendor-advisory",
"x_refsource_FEDORA"
],
"url": "https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00537.html"
},
{
"name": "MDVSA-2008:071",
"tags": [
"vendor-advisory",
"x_refsource_MANDRIVA"
],
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:071"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://wiki.rpath.com/Advisories:rPSA-2008-0112"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5022542.html"
},
{
"name": "SSRT100495",
"tags": [
"vendor-advisory",
"x_refsource_HP"
],
"url": "http://marc.info/?l=bugtraq\u0026m=130497213107107\u0026w=2"
},
{
"name": "29451",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/29451"
},
{
"name": "29663",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/29663"
},
{
"name": "FEDORA-2008-2647",
"tags": [
"vendor-advisory",
"x_refsource_FEDORA"
],
"url": "https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00544.html"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0112"
},
{
"name": "29438",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/29438"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://www.vmware.com/security/advisories/VMSA-2008-0009.html"
},
{
"name": "oval:org.mitre.oval:def:9496",
"tags": [
"vdb-entry",
"signature",
"x_refsource_OVAL"
],
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9496"
},
{
"name": "ADV-2008-0924",
"tags": [
"vdb-entry",
"x_refsource_VUPEN"
],
"url": "http://www.vupen.com/english/advisories/2008/0924/references"
},
{
"name": "RHSA-2008:0164",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "http://www.redhat.com/support/errata/RHSA-2008-0164.html"
},
{
"name": "MDVSA-2008:070",
"tags": [
"vendor-advisory",
"x_refsource_MANDRIVA"
],
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:070"
},
{
"name": "ADV-2008-0922",
"tags": [
"vdb-entry",
"x_refsource_VUPEN"
],
"url": "http://www.vupen.com/english/advisories/2008/0922/references"
},
{
"name": "29450",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/29450"
},
{
"name": "29435",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/29435"
},
{
"name": "krb5-kdc-code-execution(41275)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/41275"
},
{
"name": "1019626",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK"
],
"url": "http://www.securitytracker.com/id?1019626"
},
{
"name": "20080319 rPSA-2008-0112-1 krb5 krb5-server krb5-services krb5-test krb5-workstation",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://www.securityfocus.com/archive/1/489883/100/0/threaded"
},
{
"name": "29428",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/29428"
},
{
"name": "29420",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/29420"
},
{
"name": "DSA-1524",
"tags": [
"vendor-advisory",
"x_refsource_DEBIAN"
],
"url": "http://www.debian.org/security/2008/dsa-1524"
},
{
"name": "30535",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/30535"
},
{
"name": "APPLE-SA-2008-03-18",
"tags": [
"vendor-advisory",
"x_refsource_APPLE"
],
"url": "http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html"
},
{
"name": "RHSA-2008:0182",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "http://www.redhat.com/support/errata/RHSA-2008-0182.html"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5022520.html"
},
{
"name": "20080604 VMSA-2008-0009 Updates to VMware Workstation, VMware Player, VMware ACE, VMware Fusion, VMware Server, VMware VIX API, VMware ESX, VMware ESXi resolve critical security issues",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://www.securityfocus.com/archive/1/493080/100/0/threaded"
},
{
"name": "RHSA-2008:0180",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "http://www.redhat.com/support/errata/RHSA-2008-0180.html"
},
{
"name": "SUSE-SA:2008:016",
"tags": [
"vendor-advisory",
"x_refsource_SUSE"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00006.html"
},
{
"name": "29516",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/29516"
},
{
"name": "29462",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/29462"
},
{
"name": "29424",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/29424"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://docs.info.apple.com/article.html?artnum=307562"
},
{
"name": "RHSA-2008:0181",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "http://www.redhat.com/support/errata/RHSA-2008-0181.html"
},
{
"name": "29423",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/29423"
},
{
"name": "USN-587-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU"
],
"url": "http://www.ubuntu.com/usn/usn-587-1"
},
{
"name": "ADV-2008-1102",
"tags": [
"vdb-entry",
"x_refsource_VUPEN"
],
"url": "http://www.vupen.com/english/advisories/2008/1102/references"
},
{
"name": "28303",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/28303"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2008-001.txt"
},
{
"name": "20080318 MITKRB5-SA-2008-001: double-free, uninitialized data vulnerabilities in krb5kdc",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://www.securityfocus.com/archive/1/489761"
},
{
"name": "HPSBOV02682",
"tags": [
"vendor-advisory",
"x_refsource_HP"
],
"url": "http://marc.info/?l=bugtraq\u0026m=130497213107107\u0026w=2"
},
{
"name": "VU#895609",
"tags": [
"third-party-advisory",
"x_refsource_CERT-VN"
],
"url": "http://www.kb.cert.org/vuls/id/895609"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2008-0062",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "KDC in MIT Kerberos 5 (krb5kdc) does not set a global variable for some krb4 message types, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted messages that trigger a NULL pointer dereference or double-free."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "ADV-2008-1744",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2008/1744"
},
{
"name": "29457",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/29457"
},
{
"name": "MDVSA-2008:069",
"refsource": "MANDRIVA",
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:069"
},
{
"name": "29464",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/29464"
},
{
"name": "GLSA-200803-31",
"refsource": "GENTOO",
"url": "http://www.gentoo.org/security/en/glsa/glsa-200803-31.xml"
},
{
"name": "FEDORA-2008-2637",
"refsource": "FEDORA",
"url": "https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00537.html"
},
{
"name": "MDVSA-2008:071",
"refsource": "MANDRIVA",
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:071"
},
{
"name": "http://wiki.rpath.com/Advisories:rPSA-2008-0112",
"refsource": "CONFIRM",
"url": "http://wiki.rpath.com/Advisories:rPSA-2008-0112"
},
{
"name": "http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5022542.html",
"refsource": "CONFIRM",
"url": "http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5022542.html"
},
{
"name": "SSRT100495",
"refsource": "HP",
"url": "http://marc.info/?l=bugtraq\u0026m=130497213107107\u0026w=2"
},
{
"name": "29451",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/29451"
},
{
"name": "29663",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/29663"
},
{
"name": "FEDORA-2008-2647",
"refsource": "FEDORA",
"url": "https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00544.html"
},
{
"name": "http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0112",
"refsource": "CONFIRM",
"url": "http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0112"
},
{
"name": "29438",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/29438"
},
{
"name": "http://www.vmware.com/security/advisories/VMSA-2008-0009.html",
"refsource": "CONFIRM",
"url": "http://www.vmware.com/security/advisories/VMSA-2008-0009.html"
},
{
"name": "oval:org.mitre.oval:def:9496",
"refsource": "OVAL",
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9496"
},
{
"name": "ADV-2008-0924",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2008/0924/references"
},
{
"name": "RHSA-2008:0164",
"refsource": "REDHAT",
"url": "http://www.redhat.com/support/errata/RHSA-2008-0164.html"
},
{
"name": "MDVSA-2008:070",
"refsource": "MANDRIVA",
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:070"
},
{
"name": "ADV-2008-0922",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2008/0922/references"
},
{
"name": "29450",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/29450"
},
{
"name": "29435",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/29435"
},
{
"name": "krb5-kdc-code-execution(41275)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/41275"
},
{
"name": "1019626",
"refsource": "SECTRACK",
"url": "http://www.securitytracker.com/id?1019626"
},
{
"name": "20080319 rPSA-2008-0112-1 krb5 krb5-server krb5-services krb5-test krb5-workstation",
"refsource": "BUGTRAQ",
"url": "http://www.securityfocus.com/archive/1/489883/100/0/threaded"
},
{
"name": "29428",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/29428"
},
{
"name": "29420",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/29420"
},
{
"name": "DSA-1524",
"refsource": "DEBIAN",
"url": "http://www.debian.org/security/2008/dsa-1524"
},
{
"name": "30535",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/30535"
},
{
"name": "APPLE-SA-2008-03-18",
"refsource": "APPLE",
"url": "http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html"
},
{
"name": "RHSA-2008:0182",
"refsource": "REDHAT",
"url": "http://www.redhat.com/support/errata/RHSA-2008-0182.html"
},
{
"name": "http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5022520.html",
"refsource": "CONFIRM",
"url": "http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5022520.html"
},
{
"name": "20080604 VMSA-2008-0009 Updates to VMware Workstation, VMware Player, VMware ACE, VMware Fusion, VMware Server, VMware VIX API, VMware ESX, VMware ESXi resolve critical security issues",
"refsource": "BUGTRAQ",
"url": "http://www.securityfocus.com/archive/1/493080/100/0/threaded"
},
{
"name": "RHSA-2008:0180",
"refsource": "REDHAT",
"url": "http://www.redhat.com/support/errata/RHSA-2008-0180.html"
},
{
"name": "SUSE-SA:2008:016",
"refsource": "SUSE",
"url": "http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00006.html"
},
{
"name": "29516",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/29516"
},
{
"name": "29462",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/29462"
},
{
"name": "29424",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/29424"
},
{
"name": "http://docs.info.apple.com/article.html?artnum=307562",
"refsource": "CONFIRM",
"url": "http://docs.info.apple.com/article.html?artnum=307562"
},
{
"name": "RHSA-2008:0181",
"refsource": "REDHAT",
"url": "http://www.redhat.com/support/errata/RHSA-2008-0181.html"
},
{
"name": "29423",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/29423"
},
{
"name": "USN-587-1",
"refsource": "UBUNTU",
"url": "http://www.ubuntu.com/usn/usn-587-1"
},
{
"name": "ADV-2008-1102",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2008/1102/references"
},
{
"name": "28303",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/28303"
},
{
"name": "http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2008-001.txt",
"refsource": "CONFIRM",
"url": "http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2008-001.txt"
},
{
"name": "20080318 MITKRB5-SA-2008-001: double-free, uninitialized data vulnerabilities in krb5kdc",
"refsource": "BUGTRAQ",
"url": "http://www.securityfocus.com/archive/1/489761"
},
{
"name": "HPSBOV02682",
"refsource": "HP",
"url": "http://marc.info/?l=bugtraq\u0026m=130497213107107\u0026w=2"
},
{
"name": "VU#895609",
"refsource": "CERT-VN",
"url": "http://www.kb.cert.org/vuls/id/895609"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2008-0062",
"datePublished": "2008-03-19T10:00:00.000Z",
"dateReserved": "2008-01-03T00:00:00.000Z",
"dateUpdated": "2024-08-07T07:32:23.904Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"vulnerability-lookup:meta": {
"epss": {
"cve": "CVE-2008-0062",
"date": "2026-05-26",
"epss": "0.16257",
"percentile": "0.94912"
},
"fkie_nvd": {
"configurations": "[{\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:mit:kerberos_5:*:*:*:*:*:*:*:*\", \"versionEndIncluding\": \"1.6.3\", \"matchCriteriaId\": \"904FBF9F-9269-4088-BD5A-3C773E6F841E\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:debian:debian_linux:3.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"A2E0C1F8-31F5-4F61-9DF7-E49B43D3C873\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"0F92AB32-E7DE-43F4-B877-1F41FA162EC7\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"454A5D17-B171-4F1F-9E0B-F18D1E5CA9FD\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:canonical:ubuntu_linux:6.10:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"23E304C9-F780-4358-A58D-1E4C93977704\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:canonical:ubuntu_linux:7.04:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"6EBDAFF8-DE44-4E80-B6BD-E341F767F501\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:canonical:ubuntu_linux:7.10:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"823BF8BE-2309-4F67-A5E2-EAD98F723468\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:fedoraproject:fedora:7:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"E3EFD171-01F7-450B-B6F3-0F7E443A2337\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:fedoraproject:fedora:8:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"72E4DB7F-07C3-46BB-AAA2-05CD0312C57F\"}]}]}]",
"descriptions": "[{\"lang\": \"en\", \"value\": \"KDC in MIT Kerberos 5 (krb5kdc) does not set a global variable for some krb4 message types, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted messages that trigger a NULL pointer dereference or double-free.\"}, {\"lang\": \"es\", \"value\": \"KDC en MIT Kerberos 5 (krb5kdc) no fija variable global alguna para determinados tipos de mensaje krb4, la cual permite a atacantes remotos provocar una denegaci\\u00f3n de servicio (ca\\u00edda) y posiblemente ejecuci\\u00f3n de c\\u00f3digo de su elecci\\u00f3n mediante mensajes manipulados que disparan una referencia a un puntero nulo o doble liberaci\\u00f3n de memoria (double-free).\"}]",
"id": "CVE-2008-0062",
"lastModified": "2024-11-21T00:41:04.913",
"metrics": "{\"cvssMetricV31\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"3.1\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\", \"baseScore\": 9.8, \"baseSeverity\": \"CRITICAL\", \"attackVector\": \"NETWORK\", \"attackComplexity\": \"LOW\", \"privilegesRequired\": \"NONE\", \"userInteraction\": \"NONE\", \"scope\": \"UNCHANGED\", \"confidentialityImpact\": \"HIGH\", \"integrityImpact\": \"HIGH\", \"availabilityImpact\": \"HIGH\"}, \"exploitabilityScore\": 3.9, \"impactScore\": 5.9}], \"cvssMetricV2\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"2.0\", \"vectorString\": \"AV:N/AC:M/Au:N/C:C/I:C/A:C\", \"baseScore\": 9.3, \"accessVector\": \"NETWORK\", \"accessComplexity\": \"MEDIUM\", \"authentication\": \"NONE\", \"confidentialityImpact\": \"COMPLETE\", \"integrityImpact\": \"COMPLETE\", \"availabilityImpact\": \"COMPLETE\"}, \"baseSeverity\": \"HIGH\", \"exploitabilityScore\": 8.6, \"impactScore\": 10.0, \"acInsufInfo\": false, \"obtainAllPrivilege\": true, \"obtainUserPrivilege\": false, \"obtainOtherPrivilege\": false, \"userInteractionRequired\": false}]}",
"published": "2008-03-19T10:44:00.000",
"references": "[{\"url\": \"http://docs.info.apple.com/article.html?artnum=307562\", \"source\": \"cve@mitre.org\", \"tags\": [\"Broken Link\"]}, {\"url\": \"http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html\", \"source\": \"cve@mitre.org\", \"tags\": [\"Mailing List\"]}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00006.html\", \"source\": \"cve@mitre.org\", \"tags\": [\"Mailing List\"]}, {\"url\": \"http://marc.info/?l=bugtraq\u0026m=130497213107107\u0026w=2\", \"source\": \"cve@mitre.org\", \"tags\": [\"Mailing List\"]}, {\"url\": \"http://marc.info/?l=bugtraq\u0026m=130497213107107\u0026w=2\", \"source\": \"cve@mitre.org\", \"tags\": [\"Mailing List\"]}, {\"url\": \"http://secunia.com/advisories/29420\", \"source\": \"cve@mitre.org\", \"tags\": [\"Broken Link\"]}, {\"url\": \"http://secunia.com/advisories/29423\", \"source\": \"cve@mitre.org\", \"tags\": [\"Broken Link\"]}, {\"url\": \"http://secunia.com/advisories/29424\", \"source\": \"cve@mitre.org\", \"tags\": [\"Broken Link\"]}, {\"url\": \"http://secunia.com/advisories/29428\", \"source\": \"cve@mitre.org\", \"tags\": [\"Broken Link\"]}, {\"url\": \"http://secunia.com/advisories/29435\", \"source\": \"cve@mitre.org\", \"tags\": [\"Broken Link\"]}, {\"url\": \"http://secunia.com/advisories/29438\", \"source\": \"cve@mitre.org\", \"tags\": [\"Broken Link\"]}, {\"url\": \"http://secunia.com/advisories/29450\", \"source\": \"cve@mitre.org\", \"tags\": [\"Broken Link\"]}, {\"url\": \"http://secunia.com/advisories/29451\", \"source\": \"cve@mitre.org\", \"tags\": [\"Broken Link\"]}, {\"url\": \"http://secunia.com/advisories/29457\", \"source\": \"cve@mitre.org\", \"tags\": [\"Broken Link\"]}, {\"url\": \"http://secunia.com/advisories/29462\", \"source\": \"cve@mitre.org\", \"tags\": [\"Broken Link\"]}, {\"url\": \"http://secunia.com/advisories/29464\", \"source\": \"cve@mitre.org\", \"tags\": [\"Broken Link\"]}, {\"url\": \"http://secunia.com/advisories/29516\", \"source\": \"cve@mitre.org\", \"tags\": [\"Broken Link\"]}, {\"url\": \"http://secunia.com/advisories/29663\", \"source\": \"cve@mitre.org\", \"tags\": [\"Broken Link\"]}, {\"url\": \"http://secunia.com/advisories/30535\", \"source\": \"cve@mitre.org\", \"tags\": [\"Broken Link\"]}, {\"url\": \"http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5022520.html\", \"source\": \"cve@mitre.org\", \"tags\": [\"Broken Link\"]}, {\"url\": \"http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5022542.html\", \"source\": \"cve@mitre.org\", \"tags\": [\"Broken Link\"]}, {\"url\": \"http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2008-001.txt\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://wiki.rpath.com/Advisories:rPSA-2008-0112\", \"source\": \"cve@mitre.org\", \"tags\": [\"Broken Link\"]}, {\"url\": \"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0112\", \"source\": \"cve@mitre.org\", \"tags\": [\"Broken Link\"]}, {\"url\": \"http://www.debian.org/security/2008/dsa-1524\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://www.gentoo.org/security/en/glsa/glsa-200803-31.xml\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://www.kb.cert.org/vuls/id/895609\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\", \"US Government Resource\"]}, {\"url\": \"http://www.mandriva.com/security/advisories?name=MDVSA-2008:069\", \"source\": \"cve@mitre.org\", \"tags\": [\"Broken Link\"]}, {\"url\": \"http://www.mandriva.com/security/advisories?name=MDVSA-2008:070\", \"source\": \"cve@mitre.org\", \"tags\": [\"Broken Link\"]}, {\"url\": \"http://www.mandriva.com/security/advisories?name=MDVSA-2008:071\", \"source\": \"cve@mitre.org\", \"tags\": [\"Broken Link\"]}, {\"url\": \"http://www.redhat.com/support/errata/RHSA-2008-0164.html\", \"source\": \"cve@mitre.org\", \"tags\": [\"Broken Link\"]}, {\"url\": \"http://www.redhat.com/support/errata/RHSA-2008-0180.html\", \"source\": \"cve@mitre.org\", \"tags\": [\"Broken Link\"]}, {\"url\": \"http://www.redhat.com/support/errata/RHSA-2008-0181.html\", \"source\": \"cve@mitre.org\", \"tags\": [\"Broken Link\"]}, {\"url\": \"http://www.redhat.com/support/errata/RHSA-2008-0182.html\", \"source\": \"cve@mitre.org\", \"tags\": [\"Broken Link\"]}, {\"url\": \"http://www.securityfocus.com/archive/1/489761\", \"source\": \"cve@mitre.org\", \"tags\": [\"Broken Link\", \"Third Party Advisory\", \"VDB Entry\"]}, {\"url\": \"http://www.securityfocus.com/archive/1/489883/100/0/threaded\", \"source\": \"cve@mitre.org\", \"tags\": [\"Broken Link\", \"Third Party Advisory\", \"VDB Entry\"]}, {\"url\": \"http://www.securityfocus.com/archive/1/493080/100/0/threaded\", \"source\": \"cve@mitre.org\", \"tags\": [\"Broken Link\", \"Third Party Advisory\", \"VDB Entry\"]}, {\"url\": \"http://www.securityfocus.com/bid/28303\", \"source\": \"cve@mitre.org\", \"tags\": [\"Broken Link\", \"Third Party Advisory\", \"VDB Entry\"]}, {\"url\": \"http://www.securitytracker.com/id?1019626\", \"source\": \"cve@mitre.org\", \"tags\": [\"Broken Link\", \"Third Party Advisory\", \"VDB Entry\"]}, {\"url\": \"http://www.ubuntu.com/usn/usn-587-1\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://www.vmware.com/security/advisories/VMSA-2008-0009.html\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://www.vupen.com/english/advisories/2008/0922/references\", \"source\": \"cve@mitre.org\", \"tags\": [\"Broken Link\"]}, {\"url\": \"http://www.vupen.com/english/advisories/2008/0924/references\", \"source\": \"cve@mitre.org\", \"tags\": [\"Broken Link\"]}, {\"url\": \"http://www.vupen.com/english/advisories/2008/1102/references\", \"source\": \"cve@mitre.org\", \"tags\": [\"Broken Link\"]}, {\"url\": \"http://www.vupen.com/english/advisories/2008/1744\", \"source\": \"cve@mitre.org\", \"tags\": [\"Broken Link\"]}, {\"url\": \"https://exchange.xforce.ibmcloud.com/vulnerabilities/41275\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\", \"VDB Entry\"]}, {\"url\": \"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9496\", \"source\": \"cve@mitre.org\", \"tags\": [\"Broken Link\"]}, {\"url\": \"https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00537.html\", \"source\": \"cve@mitre.org\", \"tags\": [\"Mailing List\"]}, {\"url\": \"https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00544.html\", \"source\": \"cve@mitre.org\", \"tags\": [\"Mailing List\"]}, {\"url\": \"http://docs.info.apple.com/article.html?artnum=307562\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Broken Link\"]}, {\"url\": \"http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Mailing List\"]}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00006.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Mailing List\"]}, {\"url\": \"http://marc.info/?l=bugtraq\u0026m=130497213107107\u0026w=2\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Mailing List\"]}, {\"url\": \"http://marc.info/?l=bugtraq\u0026m=130497213107107\u0026w=2\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Mailing List\"]}, {\"url\": \"http://secunia.com/advisories/29420\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Broken Link\"]}, {\"url\": \"http://secunia.com/advisories/29423\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Broken Link\"]}, {\"url\": \"http://secunia.com/advisories/29424\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Broken Link\"]}, {\"url\": \"http://secunia.com/advisories/29428\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Broken Link\"]}, {\"url\": \"http://secunia.com/advisories/29435\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Broken Link\"]}, {\"url\": \"http://secunia.com/advisories/29438\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Broken Link\"]}, {\"url\": \"http://secunia.com/advisories/29450\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Broken Link\"]}, {\"url\": \"http://secunia.com/advisories/29451\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Broken Link\"]}, {\"url\": \"http://secunia.com/advisories/29457\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Broken Link\"]}, {\"url\": \"http://secunia.com/advisories/29462\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Broken Link\"]}, {\"url\": \"http://secunia.com/advisories/29464\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Broken Link\"]}, {\"url\": \"http://secunia.com/advisories/29516\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Broken Link\"]}, {\"url\": \"http://secunia.com/advisories/29663\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Broken Link\"]}, {\"url\": \"http://secunia.com/advisories/30535\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Broken Link\"]}, {\"url\": \"http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5022520.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Broken Link\"]}, {\"url\": \"http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5022542.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Broken Link\"]}, {\"url\": \"http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2008-001.txt\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://wiki.rpath.com/Advisories:rPSA-2008-0112\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Broken Link\"]}, {\"url\": \"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0112\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Broken Link\"]}, {\"url\": \"http://www.debian.org/security/2008/dsa-1524\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://www.gentoo.org/security/en/glsa/glsa-200803-31.xml\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://www.kb.cert.org/vuls/id/895609\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\", \"US Government Resource\"]}, {\"url\": \"http://www.mandriva.com/security/advisories?name=MDVSA-2008:069\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Broken Link\"]}, {\"url\": \"http://www.mandriva.com/security/advisories?name=MDVSA-2008:070\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Broken Link\"]}, {\"url\": \"http://www.mandriva.com/security/advisories?name=MDVSA-2008:071\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Broken Link\"]}, {\"url\": \"http://www.redhat.com/support/errata/RHSA-2008-0164.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Broken Link\"]}, {\"url\": \"http://www.redhat.com/support/errata/RHSA-2008-0180.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Broken Link\"]}, {\"url\": \"http://www.redhat.com/support/errata/RHSA-2008-0181.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Broken Link\"]}, {\"url\": \"http://www.redhat.com/support/errata/RHSA-2008-0182.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Broken Link\"]}, {\"url\": \"http://www.securityfocus.com/archive/1/489761\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Broken Link\", \"Third Party Advisory\", \"VDB Entry\"]}, {\"url\": \"http://www.securityfocus.com/archive/1/489883/100/0/threaded\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Broken Link\", \"Third Party Advisory\", \"VDB Entry\"]}, {\"url\": \"http://www.securityfocus.com/archive/1/493080/100/0/threaded\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Broken Link\", \"Third Party Advisory\", \"VDB Entry\"]}, {\"url\": \"http://www.securityfocus.com/bid/28303\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Broken Link\", \"Third Party Advisory\", \"VDB Entry\"]}, {\"url\": \"http://www.securitytracker.com/id?1019626\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Broken Link\", \"Third Party Advisory\", \"VDB Entry\"]}, {\"url\": \"http://www.ubuntu.com/usn/usn-587-1\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://www.vmware.com/security/advisories/VMSA-2008-0009.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://www.vupen.com/english/advisories/2008/0922/references\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Broken Link\"]}, {\"url\": \"http://www.vupen.com/english/advisories/2008/0924/references\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Broken Link\"]}, {\"url\": \"http://www.vupen.com/english/advisories/2008/1102/references\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Broken Link\"]}, {\"url\": \"http://www.vupen.com/english/advisories/2008/1744\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Broken Link\"]}, {\"url\": \"https://exchange.xforce.ibmcloud.com/vulnerabilities/41275\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\", \"VDB Entry\"]}, {\"url\": \"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9496\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Broken Link\"]}, {\"url\": \"https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00537.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Mailing List\"]}, {\"url\": \"https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00544.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Mailing List\"]}]",
"sourceIdentifier": "cve@mitre.org",
"vulnStatus": "Modified",
"weaknesses": "[{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-665\"}]}]"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2008-0062\",\"sourceIdentifier\":\"cve@mitre.org\",\"published\":\"2008-03-19T10:44:00.000\",\"lastModified\":\"2026-04-23T00:35:47.467\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"KDC in MIT Kerberos 5 (krb5kdc) does not set a global variable for some krb4 message types, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted messages that trigger a NULL pointer dereference or double-free.\"},{\"lang\":\"es\",\"value\":\"KDC en MIT Kerberos 5 (krb5kdc) no fija variable global alguna para determinados tipos de mensaje krb4, la cual permite a atacantes remotos provocar una denegaci\u00f3n de servicio (ca\u00edda) y posiblemente ejecuci\u00f3n de c\u00f3digo de su elecci\u00f3n mediante mensajes manipulados que disparan una referencia a un puntero nulo o doble liberaci\u00f3n de memoria (double-free).\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":9.8,\"baseSeverity\":\"CRITICAL\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":3.9,\"impactScore\":5.9}],\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:M/Au:N/C:C/I:C/A:C\",\"baseScore\":9.3,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"MEDIUM\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"COMPLETE\",\"integrityImpact\":\"COMPLETE\",\"availabilityImpact\":\"COMPLETE\"},\"baseSeverity\":\"HIGH\",\"exploitabilityScore\":8.6,\"impactScore\":10.0,\"acInsufInfo\":false,\"obtainAllPrivilege\":true,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-665\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mit:kerberos_5:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"1.6.3\",\"matchCriteriaId\":\"904FBF9F-9269-4088-BD5A-3C773E6F841E\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:debian:debian_linux:3.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A2E0C1F8-31F5-4F61-9DF7-E49B43D3C873\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0F92AB32-E7DE-43F4-B877-1F41FA162EC7\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"454A5D17-B171-4F1F-9E0B-F18D1E5CA9FD\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:canonical:ubuntu_linux:6.10:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"23E304C9-F780-4358-A58D-1E4C93977704\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:canonical:ubuntu_linux:7.04:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6EBDAFF8-DE44-4E80-B6BD-E341F767F501\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:canonical:ubuntu_linux:7.10:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"823BF8BE-2309-4F67-A5E2-EAD98F723468\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:fedoraproject:fedora:7:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E3EFD171-01F7-450B-B6F3-0F7E443A2337\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:fedoraproject:fedora:8:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"72E4DB7F-07C3-46BB-AAA2-05CD0312C57F\"}]}]}],\"references\":[{\"url\":\"http://docs.info.apple.com/article.html?artnum=307562\",\"source\":\"cve@mitre.org\",\"tags\":[\"Broken Link\"]},{\"url\":\"http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00006.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\"]},{\"url\":\"http://marc.info/?l=bugtraq\u0026m=130497213107107\u0026w=2\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\"]},{\"url\":\"http://secunia.com/advisories/29420\",\"source\":\"cve@mitre.org\",\"tags\":[\"Broken Link\"]},{\"url\":\"http://secunia.com/advisories/29423\",\"source\":\"cve@mitre.org\",\"tags\":[\"Broken Link\"]},{\"url\":\"http://secunia.com/advisories/29424\",\"source\":\"cve@mitre.org\",\"tags\":[\"Broken Link\"]},{\"url\":\"http://secunia.com/advisories/29428\",\"source\":\"cve@mitre.org\",\"tags\":[\"Broken Link\"]},{\"url\":\"http://secunia.com/advisories/29435\",\"source\":\"cve@mitre.org\",\"tags\":[\"Broken Link\"]},{\"url\":\"http://secunia.com/advisories/29438\",\"source\":\"cve@mitre.org\",\"tags\":[\"Broken Link\"]},{\"url\":\"http://secunia.com/advisories/29450\",\"source\":\"cve@mitre.org\",\"tags\":[\"Broken Link\"]},{\"url\":\"http://secunia.com/advisories/29451\",\"source\":\"cve@mitre.org\",\"tags\":[\"Broken Link\"]},{\"url\":\"http://secunia.com/advisories/29457\",\"source\":\"cve@mitre.org\",\"tags\":[\"Broken Link\"]},{\"url\":\"http://secunia.com/advisories/29462\",\"source\":\"cve@mitre.org\",\"tags\":[\"Broken Link\"]},{\"url\":\"http://secunia.com/advisories/29464\",\"source\":\"cve@mitre.org\",\"tags\":[\"Broken Link\"]},{\"url\":\"http://secunia.com/advisories/29516\",\"source\":\"cve@mitre.org\",\"tags\":[\"Broken Link\"]},{\"url\":\"http://secunia.com/advisories/29663\",\"source\":\"cve@mitre.org\",\"tags\":[\"Broken Link\"]},{\"url\":\"http://secunia.com/advisories/30535\",\"source\":\"cve@mitre.org\",\"tags\":[\"Broken Link\"]},{\"url\":\"http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5022520.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Broken Link\"]},{\"url\":\"http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5022542.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Broken Link\"]},{\"url\":\"http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2008-001.txt\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://wiki.rpath.com/Advisories:rPSA-2008-0112\",\"source\":\"cve@mitre.org\",\"tags\":[\"Broken Link\"]},{\"url\":\"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0112\",\"source\":\"cve@mitre.org\",\"tags\":[\"Broken Link\"]},{\"url\":\"http://www.debian.org/security/2008/dsa-1524\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.gentoo.org/security/en/glsa/glsa-200803-31.xml\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.kb.cert.org/vuls/id/895609\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\",\"US Government Resource\"]},{\"url\":\"http://www.mandriva.com/security/advisories?name=MDVSA-2008:069\",\"source\":\"cve@mitre.org\",\"tags\":[\"Broken Link\"]},{\"url\":\"http://www.mandriva.com/security/advisories?name=MDVSA-2008:070\",\"source\":\"cve@mitre.org\",\"tags\":[\"Broken Link\"]},{\"url\":\"http://www.mandriva.com/security/advisories?name=MDVSA-2008:071\",\"source\":\"cve@mitre.org\",\"tags\":[\"Broken Link\"]},{\"url\":\"http://www.redhat.com/support/errata/RHSA-2008-0164.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Broken Link\"]},{\"url\":\"http://www.redhat.com/support/errata/RHSA-2008-0180.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Broken Link\"]},{\"url\":\"http://www.redhat.com/support/errata/RHSA-2008-0181.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Broken Link\"]},{\"url\":\"http://www.redhat.com/support/errata/RHSA-2008-0182.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Broken Link\"]},{\"url\":\"http://www.securityfocus.com/archive/1/489761\",\"source\":\"cve@mitre.org\",\"tags\":[\"Broken Link\",\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securityfocus.com/archive/1/489883/100/0/threaded\",\"source\":\"cve@mitre.org\",\"tags\":[\"Broken Link\",\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securityfocus.com/archive/1/493080/100/0/threaded\",\"source\":\"cve@mitre.org\",\"tags\":[\"Broken Link\",\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securityfocus.com/bid/28303\",\"source\":\"cve@mitre.org\",\"tags\":[\"Broken Link\",\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id?1019626\",\"source\":\"cve@mitre.org\",\"tags\":[\"Broken Link\",\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.ubuntu.com/usn/usn-587-1\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.vmware.com/security/advisories/VMSA-2008-0009.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.vupen.com/english/advisories/2008/0922/references\",\"source\":\"cve@mitre.org\",\"tags\":[\"Broken Link\"]},{\"url\":\"http://www.vupen.com/english/advisories/2008/0924/references\",\"source\":\"cve@mitre.org\",\"tags\":[\"Broken Link\"]},{\"url\":\"http://www.vupen.com/english/advisories/2008/1102/references\",\"source\":\"cve@mitre.org\",\"tags\":[\"Broken Link\"]},{\"url\":\"http://www.vupen.com/english/advisories/2008/1744\",\"source\":\"cve@mitre.org\",\"tags\":[\"Broken Link\"]},{\"url\":\"https://exchange.xforce.ibmcloud.com/vulnerabilities/41275\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9496\",\"source\":\"cve@mitre.org\",\"tags\":[\"Broken Link\"]},{\"url\":\"https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00537.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\"]},{\"url\":\"https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00544.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\"]},{\"url\":\"http://docs.info.apple.com/article.html?artnum=307562\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Broken Link\"]},{\"url\":\"http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00006.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\"]},{\"url\":\"http://marc.info/?l=bugtraq\u0026m=130497213107107\u0026w=2\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\"]},{\"url\":\"http://secunia.com/advisories/29420\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Broken Link\"]},{\"url\":\"http://secunia.com/advisories/29423\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Broken Link\"]},{\"url\":\"http://secunia.com/advisories/29424\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Broken Link\"]},{\"url\":\"http://secunia.com/advisories/29428\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Broken Link\"]},{\"url\":\"http://secunia.com/advisories/29435\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Broken Link\"]},{\"url\":\"http://secunia.com/advisories/29438\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Broken Link\"]},{\"url\":\"http://secunia.com/advisories/29450\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Broken Link\"]},{\"url\":\"http://secunia.com/advisories/29451\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Broken Link\"]},{\"url\":\"http://secunia.com/advisories/29457\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Broken Link\"]},{\"url\":\"http://secunia.com/advisories/29462\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Broken Link\"]},{\"url\":\"http://secunia.com/advisories/29464\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Broken Link\"]},{\"url\":\"http://secunia.com/advisories/29516\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Broken Link\"]},{\"url\":\"http://secunia.com/advisories/29663\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Broken Link\"]},{\"url\":\"http://secunia.com/advisories/30535\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Broken Link\"]},{\"url\":\"http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5022520.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Broken Link\"]},{\"url\":\"http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5022542.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Broken Link\"]},{\"url\":\"http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2008-001.txt\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://wiki.rpath.com/Advisories:rPSA-2008-0112\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Broken Link\"]},{\"url\":\"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0112\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Broken Link\"]},{\"url\":\"http://www.debian.org/security/2008/dsa-1524\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.gentoo.org/security/en/glsa/glsa-200803-31.xml\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.kb.cert.org/vuls/id/895609\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\",\"US Government Resource\"]},{\"url\":\"http://www.mandriva.com/security/advisories?name=MDVSA-2008:069\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Broken Link\"]},{\"url\":\"http://www.mandriva.com/security/advisories?name=MDVSA-2008:070\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Broken Link\"]},{\"url\":\"http://www.mandriva.com/security/advisories?name=MDVSA-2008:071\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Broken Link\"]},{\"url\":\"http://www.redhat.com/support/errata/RHSA-2008-0164.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Broken Link\"]},{\"url\":\"http://www.redhat.com/support/errata/RHSA-2008-0180.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Broken Link\"]},{\"url\":\"http://www.redhat.com/support/errata/RHSA-2008-0181.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Broken Link\"]},{\"url\":\"http://www.redhat.com/support/errata/RHSA-2008-0182.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Broken Link\"]},{\"url\":\"http://www.securityfocus.com/archive/1/489761\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Broken Link\",\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securityfocus.com/archive/1/489883/100/0/threaded\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Broken Link\",\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securityfocus.com/archive/1/493080/100/0/threaded\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Broken Link\",\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securityfocus.com/bid/28303\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Broken Link\",\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id?1019626\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Broken Link\",\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.ubuntu.com/usn/usn-587-1\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.vmware.com/security/advisories/VMSA-2008-0009.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.vupen.com/english/advisories/2008/0922/references\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Broken Link\"]},{\"url\":\"http://www.vupen.com/english/advisories/2008/0924/references\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Broken Link\"]},{\"url\":\"http://www.vupen.com/english/advisories/2008/1102/references\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Broken Link\"]},{\"url\":\"http://www.vupen.com/english/advisories/2008/1744\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Broken Link\"]},{\"url\":\"https://exchange.xforce.ibmcloud.com/vulnerabilities/41275\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9496\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Broken Link\"]},{\"url\":\"https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00537.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\"]},{\"url\":\"https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00544.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\"]}]}}"
}
}
CERTA-2008-AVI-148
Vulnerability from certfr_avis - Published: - Updated:None
Description
De multiples vulnérabilités ont été découvertes dans le système d'exploitation Apple Mac OS X. L'exploitation de ces vulnérabilités permet à un individu malveillant diverses actions dont exécuter du code arbitaire à distance, effectuer un déni de service, contourner la politique de sécurité, élever ses privilèges et effectuer une atteinte à la confidentialité des données.
Solution
Se référer au bulletin de sécurité Apple 307562 pour l'obtention des correctifs (cf. section Documentation).
NoneImpacted products
References
| Title | Publication Time | Tags | |||
|---|---|---|---|---|---|
|
|||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Apple Mac Os X version 10.4.11 et ant\u00e9rieures ;",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "Apple Mac Os X version 10.5.2 et ant\u00e9rieures.",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Description\n\nDe multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans le syst\u00e8me\nd\u0027exploitation Apple Mac OS X. L\u0027exploitation de ces vuln\u00e9rabilit\u00e9s\npermet \u00e0 un individu malveillant diverses actions dont ex\u00e9cuter du code\narbitaire \u00e0 distance, effectuer un d\u00e9ni de service, contourner la\npolitique de s\u00e9curit\u00e9, \u00e9lever ses privil\u00e8ges et effectuer une atteinte \u00e0\nla confidentialit\u00e9 des donn\u00e9es.\n\n## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 Apple 307562 pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2008-0063",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-0063"
},
{
"name": "CVE-2008-0060",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-0060"
},
{
"name": "CVE-2007-3847",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-3847"
},
{
"name": "CVE-2007-6109",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-6109"
},
{
"name": "CVE-2007-1661",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-1661"
},
{
"name": "CVE-2008-0882",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-0882"
},
{
"name": "CVE-2007-6336",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-6336"
},
{
"name": "CVE-2007-2799",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-2799"
},
{
"name": "CVE-2006-3747",
"url": "https://www.cve.org/CVERecord?id=CVE-2006-3747"
},
{
"name": "CVE-2007-5000",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-5000"
},
{
"name": "CVE-2008-1089",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-1089"
},
{
"name": "CVE-2008-0005",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-0005"
},
{
"name": "CVE-2007-4768",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-4768"
},
{
"name": "CVE-2008-0059",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-0059"
},
{
"name": "CVE-2008-1000",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-1000"
},
{
"name": "CVE-2007-1660",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-1660"
},
{
"name": "CVE-2007-4568",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-4568"
},
{
"name": "CVE-2007-3378",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-3378"
},
{
"name": "CVE-2008-0052",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-0052"
},
{
"name": "CVE-2008-0990",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-0990"
},
{
"name": "CVE-2008-0995",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-0995"
},
{
"name": "CVE-2007-0898",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-0898"
},
{
"name": "CVE-2007-5266",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-5266"
},
{
"name": "CVE-2008-0055",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-0055"
},
{
"name": "CVE-2007-1997",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-1997"
},
{
"name": "CVE-2007-1659",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-1659"
},
{
"name": "CVE-2007-6337",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-6337"
},
{
"name": "CVE-2008-0044",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-0044"
},
{
"name": "CVE-2008-0045",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-0045"
},
{
"name": "CVE-2007-5971",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-5971"
},
{
"name": "CVE-2008-0046",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-0046"
},
{
"name": "CVE-2008-0047",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-0047"
},
{
"name": "CVE-2007-6335",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-6335"
},
{
"name": "CVE-2007-5267",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-5267"
},
{
"name": "CVE-2007-3725",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-3725"
},
{
"name": "CVE-2008-0054",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-0054"
},
{
"name": "CVE-2008-0996",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-0996"
},
{
"name": "CVE-2007-5268",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-5268"
},
{
"name": "CVE-2007-6203",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-6203"
},
{
"name": "CVE-2008-0051",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-0051"
},
{
"name": "CVE-2007-3799",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-3799"
},
{
"name": "CVE-2008-0048",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-0048"
},
{
"name": "CVE-2007-1662",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-1662"
},
{
"name": "CVE-2006-3334",
"url": "https://www.cve.org/CVERecord?id=CVE-2006-3334"
},
{
"name": "CVE-2008-0998",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-0998"
},
{
"name": "CVE-2007-0897",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-0897"
},
{
"name": "CVE-2008-0318",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-0318"
},
{
"name": "CVE-2007-6429",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-6429"
},
{
"name": "CVE-2007-4510",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-4510"
},
{
"name": "CVE-2007-5269",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-5269"
},
{
"name": "CVE-2007-5795",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-5795"
},
{
"name": "CVE-2008-0006",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-0006"
},
{
"name": "CVE-2008-0062",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-0062"
},
{
"name": "CVE-2008-0728",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-0728"
},
{
"name": "CVE-2007-2445",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-2445"
},
{
"name": "CVE-2008-0049",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-0049"
},
{
"name": "CVE-2007-1745",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-1745"
},
{
"name": "CVE-2007-6427",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-6427"
},
{
"name": "CVE-2008-0987",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-0987"
},
{
"name": "CVE-2008-0993",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-0993"
},
{
"name": "CVE-2008-0988",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-0988"
},
{
"name": "CVE-2008-0056",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-0056"
},
{
"name": "CVE-2008-0992",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-0992"
},
{
"name": "CVE-2006-5793",
"url": "https://www.cve.org/CVERecord?id=CVE-2006-5793"
},
{
"name": "CVE-2007-6428",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-6428"
},
{
"name": "CVE-2008-0989",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-0989"
},
{
"name": "CVE-2005-3352",
"url": "https://www.cve.org/CVERecord?id=CVE-2005-3352"
},
{
"name": "CVE-2008-0053",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-0053"
},
{
"name": "CVE-2007-4767",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-4767"
},
{
"name": "CVE-2008-0050",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-0050"
},
{
"name": "CVE-2007-5958",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-5958"
},
{
"name": "CVE-2006-6481",
"url": "https://www.cve.org/CVERecord?id=CVE-2006-6481"
},
{
"name": "CVE-2008-0994",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-0994"
},
{
"name": "CVE-2007-6421",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-6421"
},
{
"name": "CVE-2008-0058",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-0058"
},
{
"name": "CVE-2007-4752",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-4752"
},
{
"name": "CVE-2008-0999",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-0999"
},
{
"name": "CVE-2007-4560",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-4560"
},
{
"name": "CVE-2007-4990",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-4990"
},
{
"name": "CVE-2007-4766",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-4766"
},
{
"name": "CVE-2007-6388",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-6388"
},
{
"name": "CVE-2008-0596",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-0596"
},
{
"name": "CVE-2007-4887",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-4887"
}
],
"links": [],
"reference": "CERTA-2008-AVI-148",
"revisions": [
{
"description": "version initiale.",
"revision_date": "2008-03-19T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
},
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": null,
"title": "Multiples vuln\u00e9rabilit\u00e9s dans Apple Mac OS X",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple 307562 du 18 mars 2008",
"url": "http://docs.info.apple.com/article.html?artnum=307562"
}
]
}
CERTA-2008-AVI-154
Vulnerability from certfr_avis - Published: - Updated:
De multiples vulnérabilités dans Kerberos 5 permettent de porter atteinte à la confidentialité des données, de réaliser un déni de service à distance et éventuellement, d'exécuter du code arbitraire à distance.
Description
Plusieurs vulnérabilités ont été découvertes dans Kerberos 5 :
- l'utilisation d'un pointeur non initialisé pour certains types de messages krb4 peut provoquer un déni de service ou l'exécution de code arbitraire à distance. L'exploitation de cette vulnérabilité nécessite l'activation du support Kerberos 4, ce qui n'est pas le cas par défaut (CVE-2008-0062) ;
- des messages krb4 peuvent contenir des informations stockées en mémoire, ce qui peut porter atteinte à la confidentialité des données. L'exploitation de cette vulnérabilité nécessite l'activation du support Kerberos 4 (CVE-2008-0063) ;
- un utilisateur malintentionné peut provoquer une corruption de la mémoire dans le processus kadmind, ce qui se traduit par un déni de service et, éventuellement, une exécution de code arbitraire à distance. L'exploitation de cette vulnérabilité nécessite des configurations qui permettent l'ouverture d'un grand nombre de descripteurs de fichier par processus (CVE-2008-0947 et CVE-2008-0948).
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Kerberos 5 versions 1.6.3 et antérieures.
Impacted products
| Vendor | Product | Description |
|---|
References
| Title | Publication Time | Tags | |
|---|---|---|---|
|
|
|||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [],
"affected_systems_content": "\u003cP\u003e\u003cSPAN class=\"textit\"\u003eKerberos 5\u003c/SPAN\u003e versions 1.6.3 et ant\u00e9rieures.\u003c/P\u003e",
"content": "## Description\n\nPlusieurs vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Kerberos 5 :\n\n- l\u0027utilisation d\u0027un pointeur non initialis\u00e9 pour certains types de\n messages krb4 peut provoquer un d\u00e9ni de service ou l\u0027ex\u00e9cution de\n code arbitraire \u00e0 distance. L\u0027exploitation de cette vuln\u00e9rabilit\u00e9\n n\u00e9cessite l\u0027activation du support Kerberos 4, ce qui n\u0027est pas le\n cas par d\u00e9faut (CVE-2008-0062) ;\n- des messages krb4 peuvent contenir des informations stock\u00e9es en\n m\u00e9moire, ce qui peut porter atteinte \u00e0 la confidentialit\u00e9 des\n donn\u00e9es. L\u0027exploitation de cette vuln\u00e9rabilit\u00e9 n\u00e9cessite\n l\u0027activation du support Kerberos 4 (CVE-2008-0063) ;\n- un utilisateur malintentionn\u00e9 peut provoquer une corruption de la\n m\u00e9moire dans le processus kadmind, ce qui se traduit par un d\u00e9ni de\n service et, \u00e9ventuellement, une ex\u00e9cution de code arbitraire \u00e0\n distance. L\u0027exploitation de cette vuln\u00e9rabilit\u00e9 n\u00e9cessite des\n configurations qui permettent l\u0027ouverture d\u0027un grand nombre de\n descripteurs de fichier par processus (CVE-2008-0947 et\n CVE-2008-0948).\n\n## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2008-0063",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-0063"
},
{
"name": "CVE-2008-0948",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-0948"
},
{
"name": "CVE-2008-0947",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-0947"
},
{
"name": "CVE-2008-0062",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-0062"
}
],
"links": [
{
"title": "Bulletin de s\u00e9curit\u00e9 Debian DSA-1524 du 18 mars 2008 :",
"url": "http://www.debian.org/security/2008/dsa-1524"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 Ubuntu USN-587-1 du 19 mars 2008 :",
"url": "http://www.ubuntulinux.org/usn/usn-587-1"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 RedHat RHSA-2008:0180 du 18 mars 2008 :",
"url": "http://rhn.redhat.com/errata/RHSA-2008-0180.html"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 Mandriva MDVSA-2008:069 du 19 mars 2008 :",
"url": "http://www.mandriva.com/en/security/advisroies?name=MDVSA-2008:069"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 Gentoo GLSA-200803-31 du 24 mars 2008 :",
"url": "http://www.gentoo.org/security/en/glsa/glsa-200803-31.xml"
}
],
"reference": "CERTA-2008-AVI-154",
"revisions": [
{
"description": "version initiale.",
"revision_date": "2008-03-20T00:00:00.000000"
},
{
"description": "ajout des r\u00e9f\u00e9rences aux bulletins de s\u00e9curit\u00e9 Gentoo, Debian et Mandriva.",
"revision_date": "2008-03-25T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s dans \u003cspan class=\"textit\"\u003eKerberos 5\u003c/span\u003e\npermettent de porter atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es, de\nr\u00e9aliser un d\u00e9ni de service \u00e0 distance et \u00e9ventuellement, d\u0027ex\u00e9cuter du\ncode arbitraire \u00e0 distance.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans Kerberos",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 MITKRB5-SA-2008-001 du 18 mars 2008",
"url": "http://web.mit.edu/kerberos/www/advisories/MITKRB5-SA-2008-001.txt"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 MITKRB5-SA-2008-002 du 18 mars 2008",
"url": "http://web.mit.edu/kerberos/www/advisories/MITKRB5-SA-2008-002.txt"
}
]
}
CERTA-2008-AVI-148
Vulnerability from certfr_avis - Published: - Updated:None
Description
De multiples vulnérabilités ont été découvertes dans le système d'exploitation Apple Mac OS X. L'exploitation de ces vulnérabilités permet à un individu malveillant diverses actions dont exécuter du code arbitaire à distance, effectuer un déni de service, contourner la politique de sécurité, élever ses privilèges et effectuer une atteinte à la confidentialité des données.
Solution
Se référer au bulletin de sécurité Apple 307562 pour l'obtention des correctifs (cf. section Documentation).
NoneImpacted products
References
| Title | Publication Time | Tags | |||
|---|---|---|---|---|---|
|
|||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Apple Mac Os X version 10.4.11 et ant\u00e9rieures ;",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "Apple Mac Os X version 10.5.2 et ant\u00e9rieures.",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Description\n\nDe multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans le syst\u00e8me\nd\u0027exploitation Apple Mac OS X. L\u0027exploitation de ces vuln\u00e9rabilit\u00e9s\npermet \u00e0 un individu malveillant diverses actions dont ex\u00e9cuter du code\narbitaire \u00e0 distance, effectuer un d\u00e9ni de service, contourner la\npolitique de s\u00e9curit\u00e9, \u00e9lever ses privil\u00e8ges et effectuer une atteinte \u00e0\nla confidentialit\u00e9 des donn\u00e9es.\n\n## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 Apple 307562 pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2008-0063",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-0063"
},
{
"name": "CVE-2008-0060",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-0060"
},
{
"name": "CVE-2007-3847",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-3847"
},
{
"name": "CVE-2007-6109",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-6109"
},
{
"name": "CVE-2007-1661",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-1661"
},
{
"name": "CVE-2008-0882",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-0882"
},
{
"name": "CVE-2007-6336",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-6336"
},
{
"name": "CVE-2007-2799",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-2799"
},
{
"name": "CVE-2006-3747",
"url": "https://www.cve.org/CVERecord?id=CVE-2006-3747"
},
{
"name": "CVE-2007-5000",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-5000"
},
{
"name": "CVE-2008-1089",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-1089"
},
{
"name": "CVE-2008-0005",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-0005"
},
{
"name": "CVE-2007-4768",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-4768"
},
{
"name": "CVE-2008-0059",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-0059"
},
{
"name": "CVE-2008-1000",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-1000"
},
{
"name": "CVE-2007-1660",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-1660"
},
{
"name": "CVE-2007-4568",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-4568"
},
{
"name": "CVE-2007-3378",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-3378"
},
{
"name": "CVE-2008-0052",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-0052"
},
{
"name": "CVE-2008-0990",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-0990"
},
{
"name": "CVE-2008-0995",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-0995"
},
{
"name": "CVE-2007-0898",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-0898"
},
{
"name": "CVE-2007-5266",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-5266"
},
{
"name": "CVE-2008-0055",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-0055"
},
{
"name": "CVE-2007-1997",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-1997"
},
{
"name": "CVE-2007-1659",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-1659"
},
{
"name": "CVE-2007-6337",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-6337"
},
{
"name": "CVE-2008-0044",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-0044"
},
{
"name": "CVE-2008-0045",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-0045"
},
{
"name": "CVE-2007-5971",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-5971"
},
{
"name": "CVE-2008-0046",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-0046"
},
{
"name": "CVE-2008-0047",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-0047"
},
{
"name": "CVE-2007-6335",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-6335"
},
{
"name": "CVE-2007-5267",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-5267"
},
{
"name": "CVE-2007-3725",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-3725"
},
{
"name": "CVE-2008-0054",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-0054"
},
{
"name": "CVE-2008-0996",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-0996"
},
{
"name": "CVE-2007-5268",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-5268"
},
{
"name": "CVE-2007-6203",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-6203"
},
{
"name": "CVE-2008-0051",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-0051"
},
{
"name": "CVE-2007-3799",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-3799"
},
{
"name": "CVE-2008-0048",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-0048"
},
{
"name": "CVE-2007-1662",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-1662"
},
{
"name": "CVE-2006-3334",
"url": "https://www.cve.org/CVERecord?id=CVE-2006-3334"
},
{
"name": "CVE-2008-0998",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-0998"
},
{
"name": "CVE-2007-0897",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-0897"
},
{
"name": "CVE-2008-0318",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-0318"
},
{
"name": "CVE-2007-6429",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-6429"
},
{
"name": "CVE-2007-4510",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-4510"
},
{
"name": "CVE-2007-5269",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-5269"
},
{
"name": "CVE-2007-5795",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-5795"
},
{
"name": "CVE-2008-0006",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-0006"
},
{
"name": "CVE-2008-0062",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-0062"
},
{
"name": "CVE-2008-0728",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-0728"
},
{
"name": "CVE-2007-2445",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-2445"
},
{
"name": "CVE-2008-0049",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-0049"
},
{
"name": "CVE-2007-1745",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-1745"
},
{
"name": "CVE-2007-6427",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-6427"
},
{
"name": "CVE-2008-0987",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-0987"
},
{
"name": "CVE-2008-0993",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-0993"
},
{
"name": "CVE-2008-0988",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-0988"
},
{
"name": "CVE-2008-0056",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-0056"
},
{
"name": "CVE-2008-0992",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-0992"
},
{
"name": "CVE-2006-5793",
"url": "https://www.cve.org/CVERecord?id=CVE-2006-5793"
},
{
"name": "CVE-2007-6428",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-6428"
},
{
"name": "CVE-2008-0989",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-0989"
},
{
"name": "CVE-2005-3352",
"url": "https://www.cve.org/CVERecord?id=CVE-2005-3352"
},
{
"name": "CVE-2008-0053",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-0053"
},
{
"name": "CVE-2007-4767",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-4767"
},
{
"name": "CVE-2008-0050",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-0050"
},
{
"name": "CVE-2007-5958",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-5958"
},
{
"name": "CVE-2006-6481",
"url": "https://www.cve.org/CVERecord?id=CVE-2006-6481"
},
{
"name": "CVE-2008-0994",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-0994"
},
{
"name": "CVE-2007-6421",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-6421"
},
{
"name": "CVE-2008-0058",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-0058"
},
{
"name": "CVE-2007-4752",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-4752"
},
{
"name": "CVE-2008-0999",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-0999"
},
{
"name": "CVE-2007-4560",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-4560"
},
{
"name": "CVE-2007-4990",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-4990"
},
{
"name": "CVE-2007-4766",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-4766"
},
{
"name": "CVE-2007-6388",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-6388"
},
{
"name": "CVE-2008-0596",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-0596"
},
{
"name": "CVE-2007-4887",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-4887"
}
],
"links": [],
"reference": "CERTA-2008-AVI-148",
"revisions": [
{
"description": "version initiale.",
"revision_date": "2008-03-19T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
},
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": null,
"title": "Multiples vuln\u00e9rabilit\u00e9s dans Apple Mac OS X",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple 307562 du 18 mars 2008",
"url": "http://docs.info.apple.com/article.html?artnum=307562"
}
]
}
CERTA-2008-AVI-154
Vulnerability from certfr_avis - Published: - Updated:
De multiples vulnérabilités dans Kerberos 5 permettent de porter atteinte à la confidentialité des données, de réaliser un déni de service à distance et éventuellement, d'exécuter du code arbitraire à distance.
Description
Plusieurs vulnérabilités ont été découvertes dans Kerberos 5 :
- l'utilisation d'un pointeur non initialisé pour certains types de messages krb4 peut provoquer un déni de service ou l'exécution de code arbitraire à distance. L'exploitation de cette vulnérabilité nécessite l'activation du support Kerberos 4, ce qui n'est pas le cas par défaut (CVE-2008-0062) ;
- des messages krb4 peuvent contenir des informations stockées en mémoire, ce qui peut porter atteinte à la confidentialité des données. L'exploitation de cette vulnérabilité nécessite l'activation du support Kerberos 4 (CVE-2008-0063) ;
- un utilisateur malintentionné peut provoquer une corruption de la mémoire dans le processus kadmind, ce qui se traduit par un déni de service et, éventuellement, une exécution de code arbitraire à distance. L'exploitation de cette vulnérabilité nécessite des configurations qui permettent l'ouverture d'un grand nombre de descripteurs de fichier par processus (CVE-2008-0947 et CVE-2008-0948).
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Kerberos 5 versions 1.6.3 et antérieures.
Impacted products
| Vendor | Product | Description |
|---|
References
| Title | Publication Time | Tags | |
|---|---|---|---|
|
|
|||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [],
"affected_systems_content": "\u003cP\u003e\u003cSPAN class=\"textit\"\u003eKerberos 5\u003c/SPAN\u003e versions 1.6.3 et ant\u00e9rieures.\u003c/P\u003e",
"content": "## Description\n\nPlusieurs vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Kerberos 5 :\n\n- l\u0027utilisation d\u0027un pointeur non initialis\u00e9 pour certains types de\n messages krb4 peut provoquer un d\u00e9ni de service ou l\u0027ex\u00e9cution de\n code arbitraire \u00e0 distance. L\u0027exploitation de cette vuln\u00e9rabilit\u00e9\n n\u00e9cessite l\u0027activation du support Kerberos 4, ce qui n\u0027est pas le\n cas par d\u00e9faut (CVE-2008-0062) ;\n- des messages krb4 peuvent contenir des informations stock\u00e9es en\n m\u00e9moire, ce qui peut porter atteinte \u00e0 la confidentialit\u00e9 des\n donn\u00e9es. L\u0027exploitation de cette vuln\u00e9rabilit\u00e9 n\u00e9cessite\n l\u0027activation du support Kerberos 4 (CVE-2008-0063) ;\n- un utilisateur malintentionn\u00e9 peut provoquer une corruption de la\n m\u00e9moire dans le processus kadmind, ce qui se traduit par un d\u00e9ni de\n service et, \u00e9ventuellement, une ex\u00e9cution de code arbitraire \u00e0\n distance. L\u0027exploitation de cette vuln\u00e9rabilit\u00e9 n\u00e9cessite des\n configurations qui permettent l\u0027ouverture d\u0027un grand nombre de\n descripteurs de fichier par processus (CVE-2008-0947 et\n CVE-2008-0948).\n\n## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2008-0063",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-0063"
},
{
"name": "CVE-2008-0948",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-0948"
},
{
"name": "CVE-2008-0947",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-0947"
},
{
"name": "CVE-2008-0062",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-0062"
}
],
"links": [
{
"title": "Bulletin de s\u00e9curit\u00e9 Debian DSA-1524 du 18 mars 2008 :",
"url": "http://www.debian.org/security/2008/dsa-1524"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 Ubuntu USN-587-1 du 19 mars 2008 :",
"url": "http://www.ubuntulinux.org/usn/usn-587-1"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 RedHat RHSA-2008:0180 du 18 mars 2008 :",
"url": "http://rhn.redhat.com/errata/RHSA-2008-0180.html"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 Mandriva MDVSA-2008:069 du 19 mars 2008 :",
"url": "http://www.mandriva.com/en/security/advisroies?name=MDVSA-2008:069"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 Gentoo GLSA-200803-31 du 24 mars 2008 :",
"url": "http://www.gentoo.org/security/en/glsa/glsa-200803-31.xml"
}
],
"reference": "CERTA-2008-AVI-154",
"revisions": [
{
"description": "version initiale.",
"revision_date": "2008-03-20T00:00:00.000000"
},
{
"description": "ajout des r\u00e9f\u00e9rences aux bulletins de s\u00e9curit\u00e9 Gentoo, Debian et Mandriva.",
"revision_date": "2008-03-25T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s dans \u003cspan class=\"textit\"\u003eKerberos 5\u003c/span\u003e\npermettent de porter atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es, de\nr\u00e9aliser un d\u00e9ni de service \u00e0 distance et \u00e9ventuellement, d\u0027ex\u00e9cuter du\ncode arbitraire \u00e0 distance.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans Kerberos",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 MITKRB5-SA-2008-001 du 18 mars 2008",
"url": "http://web.mit.edu/kerberos/www/advisories/MITKRB5-SA-2008-001.txt"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 MITKRB5-SA-2008-002 du 18 mars 2008",
"url": "http://web.mit.edu/kerberos/www/advisories/MITKRB5-SA-2008-002.txt"
}
]
}
FKIE_CVE-2008-0062
Vulnerability from fkie_nvd - Published: 2008-03-19 10:44 - Updated: 2026-04-23 00:35
Severity
Summary
KDC in MIT Kerberos 5 (krb5kdc) does not set a global variable for some krb4 message types, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted messages that trigger a NULL pointer dereference or double-free.
References
Impacted products
| Vendor | Product | Version | |
|---|---|---|---|
| mit | kerberos_5 | * | |
| debian | debian_linux | 3.1 | |
| debian | debian_linux | 4.0 | |
| canonical | ubuntu_linux | 6.06 | |
| canonical | ubuntu_linux | 6.10 | |
| canonical | ubuntu_linux | 7.04 | |
| canonical | ubuntu_linux | 7.10 | |
| fedoraproject | fedora | 7 | |
| fedoraproject | fedora | 8 |
{
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:mit:kerberos_5:*:*:*:*:*:*:*:*",
"matchCriteriaId": "904FBF9F-9269-4088-BD5A-3C773E6F841E",
"versionEndIncluding": "1.6.3",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:debian:debian_linux:3.1:*:*:*:*:*:*:*",
"matchCriteriaId": "A2E0C1F8-31F5-4F61-9DF7-E49B43D3C873",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*",
"matchCriteriaId": "0F92AB32-E7DE-43F4-B877-1F41FA162EC7",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*",
"matchCriteriaId": "454A5D17-B171-4F1F-9E0B-F18D1E5CA9FD",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:canonical:ubuntu_linux:6.10:*:*:*:*:*:*:*",
"matchCriteriaId": "23E304C9-F780-4358-A58D-1E4C93977704",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:canonical:ubuntu_linux:7.04:*:*:*:*:*:*:*",
"matchCriteriaId": "6EBDAFF8-DE44-4E80-B6BD-E341F767F501",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:canonical:ubuntu_linux:7.10:*:*:*:*:*:*:*",
"matchCriteriaId": "823BF8BE-2309-4F67-A5E2-EAD98F723468",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:fedoraproject:fedora:7:*:*:*:*:*:*:*",
"matchCriteriaId": "E3EFD171-01F7-450B-B6F3-0F7E443A2337",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:fedoraproject:fedora:8:*:*:*:*:*:*:*",
"matchCriteriaId": "72E4DB7F-07C3-46BB-AAA2-05CD0312C57F",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "KDC in MIT Kerberos 5 (krb5kdc) does not set a global variable for some krb4 message types, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted messages that trigger a NULL pointer dereference or double-free."
},
{
"lang": "es",
"value": "KDC en MIT Kerberos 5 (krb5kdc) no fija variable global alguna para determinados tipos de mensaje krb4, la cual permite a atacantes remotos provocar una denegaci\u00f3n de servicio (ca\u00edda) y posiblemente ejecuci\u00f3n de c\u00f3digo de su elecci\u00f3n mediante mensajes manipulados que disparan una referencia a un puntero nulo o doble liberaci\u00f3n de memoria (double-free)."
}
],
"id": "CVE-2008-0062",
"lastModified": "2026-04-23T00:35:47.467",
"metrics": {
"cvssMetricV2": [
{
"acInsufInfo": false,
"baseSeverity": "HIGH",
"cvssData": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "COMPLETE",
"baseScore": 9.3,
"confidentialityImpact": "COMPLETE",
"integrityImpact": "COMPLETE",
"vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C",
"version": "2.0"
},
"exploitabilityScore": 8.6,
"impactScore": 10.0,
"obtainAllPrivilege": true,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"source": "nvd@nist.gov",
"type": "Primary",
"userInteractionRequired": false
}
],
"cvssMetricV31": [
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"exploitabilityScore": 3.9,
"impactScore": 5.9,
"source": "nvd@nist.gov",
"type": "Primary"
}
]
},
"published": "2008-03-19T10:44:00.000",
"references": [
{
"source": "cve@mitre.org",
"tags": [
"Broken Link"
],
"url": "http://docs.info.apple.com/article.html?artnum=307562"
},
{
"source": "cve@mitre.org",
"tags": [
"Mailing List"
],
"url": "http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html"
},
{
"source": "cve@mitre.org",
"tags": [
"Mailing List"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00006.html"
},
{
"source": "cve@mitre.org",
"tags": [
"Mailing List"
],
"url": "http://marc.info/?l=bugtraq\u0026m=130497213107107\u0026w=2"
},
{
"source": "cve@mitre.org",
"tags": [
"Broken Link"
],
"url": "http://secunia.com/advisories/29420"
},
{
"source": "cve@mitre.org",
"tags": [
"Broken Link"
],
"url": "http://secunia.com/advisories/29423"
},
{
"source": "cve@mitre.org",
"tags": [
"Broken Link"
],
"url": "http://secunia.com/advisories/29424"
},
{
"source": "cve@mitre.org",
"tags": [
"Broken Link"
],
"url": "http://secunia.com/advisories/29428"
},
{
"source": "cve@mitre.org",
"tags": [
"Broken Link"
],
"url": "http://secunia.com/advisories/29435"
},
{
"source": "cve@mitre.org",
"tags": [
"Broken Link"
],
"url": "http://secunia.com/advisories/29438"
},
{
"source": "cve@mitre.org",
"tags": [
"Broken Link"
],
"url": "http://secunia.com/advisories/29450"
},
{
"source": "cve@mitre.org",
"tags": [
"Broken Link"
],
"url": "http://secunia.com/advisories/29451"
},
{
"source": "cve@mitre.org",
"tags": [
"Broken Link"
],
"url": "http://secunia.com/advisories/29457"
},
{
"source": "cve@mitre.org",
"tags": [
"Broken Link"
],
"url": "http://secunia.com/advisories/29462"
},
{
"source": "cve@mitre.org",
"tags": [
"Broken Link"
],
"url": "http://secunia.com/advisories/29464"
},
{
"source": "cve@mitre.org",
"tags": [
"Broken Link"
],
"url": "http://secunia.com/advisories/29516"
},
{
"source": "cve@mitre.org",
"tags": [
"Broken Link"
],
"url": "http://secunia.com/advisories/29663"
},
{
"source": "cve@mitre.org",
"tags": [
"Broken Link"
],
"url": "http://secunia.com/advisories/30535"
},
{
"source": "cve@mitre.org",
"tags": [
"Broken Link"
],
"url": "http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5022520.html"
},
{
"source": "cve@mitre.org",
"tags": [
"Broken Link"
],
"url": "http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5022542.html"
},
{
"source": "cve@mitre.org",
"tags": [
"Third Party Advisory"
],
"url": "http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2008-001.txt"
},
{
"source": "cve@mitre.org",
"tags": [
"Broken Link"
],
"url": "http://wiki.rpath.com/Advisories:rPSA-2008-0112"
},
{
"source": "cve@mitre.org",
"tags": [
"Broken Link"
],
"url": "http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0112"
},
{
"source": "cve@mitre.org",
"tags": [
"Third Party Advisory"
],
"url": "http://www.debian.org/security/2008/dsa-1524"
},
{
"source": "cve@mitre.org",
"tags": [
"Third Party Advisory"
],
"url": "http://www.gentoo.org/security/en/glsa/glsa-200803-31.xml"
},
{
"source": "cve@mitre.org",
"tags": [
"Third Party Advisory",
"US Government Resource"
],
"url": "http://www.kb.cert.org/vuls/id/895609"
},
{
"source": "cve@mitre.org",
"tags": [
"Broken Link"
],
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:069"
},
{
"source": "cve@mitre.org",
"tags": [
"Broken Link"
],
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:070"
},
{
"source": "cve@mitre.org",
"tags": [
"Broken Link"
],
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:071"
},
{
"source": "cve@mitre.org",
"tags": [
"Broken Link"
],
"url": "http://www.redhat.com/support/errata/RHSA-2008-0164.html"
},
{
"source": "cve@mitre.org",
"tags": [
"Broken Link"
],
"url": "http://www.redhat.com/support/errata/RHSA-2008-0180.html"
},
{
"source": "cve@mitre.org",
"tags": [
"Broken Link"
],
"url": "http://www.redhat.com/support/errata/RHSA-2008-0181.html"
},
{
"source": "cve@mitre.org",
"tags": [
"Broken Link"
],
"url": "http://www.redhat.com/support/errata/RHSA-2008-0182.html"
},
{
"source": "cve@mitre.org",
"tags": [
"Broken Link",
"Third Party Advisory",
"VDB Entry"
],
"url": "http://www.securityfocus.com/archive/1/489761"
},
{
"source": "cve@mitre.org",
"tags": [
"Broken Link",
"Third Party Advisory",
"VDB Entry"
],
"url": "http://www.securityfocus.com/archive/1/489883/100/0/threaded"
},
{
"source": "cve@mitre.org",
"tags": [
"Broken Link",
"Third Party Advisory",
"VDB Entry"
],
"url": "http://www.securityfocus.com/archive/1/493080/100/0/threaded"
},
{
"source": "cve@mitre.org",
"tags": [
"Broken Link",
"Third Party Advisory",
"VDB Entry"
],
"url": "http://www.securityfocus.com/bid/28303"
},
{
"source": "cve@mitre.org",
"tags": [
"Broken Link",
"Third Party Advisory",
"VDB Entry"
],
"url": "http://www.securitytracker.com/id?1019626"
},
{
"source": "cve@mitre.org",
"tags": [
"Third Party Advisory"
],
"url": "http://www.ubuntu.com/usn/usn-587-1"
},
{
"source": "cve@mitre.org",
"tags": [
"Third Party Advisory"
],
"url": "http://www.vmware.com/security/advisories/VMSA-2008-0009.html"
},
{
"source": "cve@mitre.org",
"tags": [
"Broken Link"
],
"url": "http://www.vupen.com/english/advisories/2008/0922/references"
},
{
"source": "cve@mitre.org",
"tags": [
"Broken Link"
],
"url": "http://www.vupen.com/english/advisories/2008/0924/references"
},
{
"source": "cve@mitre.org",
"tags": [
"Broken Link"
],
"url": "http://www.vupen.com/english/advisories/2008/1102/references"
},
{
"source": "cve@mitre.org",
"tags": [
"Broken Link"
],
"url": "http://www.vupen.com/english/advisories/2008/1744"
},
{
"source": "cve@mitre.org",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/41275"
},
{
"source": "cve@mitre.org",
"tags": [
"Broken Link"
],
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9496"
},
{
"source": "cve@mitre.org",
"tags": [
"Mailing List"
],
"url": "https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00537.html"
},
{
"source": "cve@mitre.org",
"tags": [
"Mailing List"
],
"url": "https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00544.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Broken Link"
],
"url": "http://docs.info.apple.com/article.html?artnum=307562"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Mailing List"
],
"url": "http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Mailing List"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00006.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Mailing List"
],
"url": "http://marc.info/?l=bugtraq\u0026m=130497213107107\u0026w=2"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Broken Link"
],
"url": "http://secunia.com/advisories/29420"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Broken Link"
],
"url": "http://secunia.com/advisories/29423"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Broken Link"
],
"url": "http://secunia.com/advisories/29424"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Broken Link"
],
"url": "http://secunia.com/advisories/29428"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Broken Link"
],
"url": "http://secunia.com/advisories/29435"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Broken Link"
],
"url": "http://secunia.com/advisories/29438"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Broken Link"
],
"url": "http://secunia.com/advisories/29450"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Broken Link"
],
"url": "http://secunia.com/advisories/29451"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Broken Link"
],
"url": "http://secunia.com/advisories/29457"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Broken Link"
],
"url": "http://secunia.com/advisories/29462"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Broken Link"
],
"url": "http://secunia.com/advisories/29464"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Broken Link"
],
"url": "http://secunia.com/advisories/29516"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Broken Link"
],
"url": "http://secunia.com/advisories/29663"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Broken Link"
],
"url": "http://secunia.com/advisories/30535"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Broken Link"
],
"url": "http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5022520.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Broken Link"
],
"url": "http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5022542.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2008-001.txt"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Broken Link"
],
"url": "http://wiki.rpath.com/Advisories:rPSA-2008-0112"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Broken Link"
],
"url": "http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0112"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "http://www.debian.org/security/2008/dsa-1524"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "http://www.gentoo.org/security/en/glsa/glsa-200803-31.xml"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory",
"US Government Resource"
],
"url": "http://www.kb.cert.org/vuls/id/895609"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Broken Link"
],
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:069"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Broken Link"
],
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:070"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Broken Link"
],
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:071"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Broken Link"
],
"url": "http://www.redhat.com/support/errata/RHSA-2008-0164.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Broken Link"
],
"url": "http://www.redhat.com/support/errata/RHSA-2008-0180.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Broken Link"
],
"url": "http://www.redhat.com/support/errata/RHSA-2008-0181.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Broken Link"
],
"url": "http://www.redhat.com/support/errata/RHSA-2008-0182.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Broken Link",
"Third Party Advisory",
"VDB Entry"
],
"url": "http://www.securityfocus.com/archive/1/489761"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Broken Link",
"Third Party Advisory",
"VDB Entry"
],
"url": "http://www.securityfocus.com/archive/1/489883/100/0/threaded"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Broken Link",
"Third Party Advisory",
"VDB Entry"
],
"url": "http://www.securityfocus.com/archive/1/493080/100/0/threaded"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Broken Link",
"Third Party Advisory",
"VDB Entry"
],
"url": "http://www.securityfocus.com/bid/28303"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Broken Link",
"Third Party Advisory",
"VDB Entry"
],
"url": "http://www.securitytracker.com/id?1019626"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "http://www.ubuntu.com/usn/usn-587-1"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "http://www.vmware.com/security/advisories/VMSA-2008-0009.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Broken Link"
],
"url": "http://www.vupen.com/english/advisories/2008/0922/references"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Broken Link"
],
"url": "http://www.vupen.com/english/advisories/2008/0924/references"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Broken Link"
],
"url": "http://www.vupen.com/english/advisories/2008/1102/references"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Broken Link"
],
"url": "http://www.vupen.com/english/advisories/2008/1744"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/41275"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Broken Link"
],
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9496"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Mailing List"
],
"url": "https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00537.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Mailing List"
],
"url": "https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00544.html"
}
],
"sourceIdentifier": "cve@mitre.org",
"vulnStatus": "Modified",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-665"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
}
]
}
GHSA-F6C2-J3P8-VXVV
Vulnerability from github – Published: 2022-05-01 23:27 – Updated: 2023-12-28 18:30
VLAI
Details
KDC in MIT Kerberos 5 (krb5kdc) does not set a global variable for some krb4 message types, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted messages that trigger a NULL pointer dereference or double-free.
Severity
9.8 (Critical)
{
"affected": [],
"aliases": [
"CVE-2008-0062"
],
"database_specific": {
"cwe_ids": [
"CWE-665"
],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2008-03-19T10:44:00Z",
"severity": "HIGH"
},
"details": "KDC in MIT Kerberos 5 (krb5kdc) does not set a global variable for some krb4 message types, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted messages that trigger a NULL pointer dereference or double-free.",
"id": "GHSA-f6c2-j3p8-vxvv",
"modified": "2023-12-28T18:30:29Z",
"published": "2022-05-01T23:27:25Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2008-0062"
},
{
"type": "WEB",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/41275"
},
{
"type": "WEB",
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9496"
},
{
"type": "WEB",
"url": "https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00537.html"
},
{
"type": "WEB",
"url": "https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00544.html"
},
{
"type": "WEB",
"url": "http://docs.info.apple.com/article.html?artnum=307562"
},
{
"type": "WEB",
"url": "http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html"
},
{
"type": "WEB",
"url": "http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00006.html"
},
{
"type": "WEB",
"url": "http://marc.info/?l=bugtraq\u0026m=130497213107107\u0026w=2"
},
{
"type": "WEB",
"url": "http://secunia.com/advisories/29420"
},
{
"type": "WEB",
"url": "http://secunia.com/advisories/29423"
},
{
"type": "WEB",
"url": "http://secunia.com/advisories/29424"
},
{
"type": "WEB",
"url": "http://secunia.com/advisories/29428"
},
{
"type": "WEB",
"url": "http://secunia.com/advisories/29435"
},
{
"type": "WEB",
"url": "http://secunia.com/advisories/29438"
},
{
"type": "WEB",
"url": "http://secunia.com/advisories/29450"
},
{
"type": "WEB",
"url": "http://secunia.com/advisories/29451"
},
{
"type": "WEB",
"url": "http://secunia.com/advisories/29457"
},
{
"type": "WEB",
"url": "http://secunia.com/advisories/29462"
},
{
"type": "WEB",
"url": "http://secunia.com/advisories/29464"
},
{
"type": "WEB",
"url": "http://secunia.com/advisories/29516"
},
{
"type": "WEB",
"url": "http://secunia.com/advisories/29663"
},
{
"type": "WEB",
"url": "http://secunia.com/advisories/30535"
},
{
"type": "WEB",
"url": "http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5022520.html"
},
{
"type": "WEB",
"url": "http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5022542.html"
},
{
"type": "WEB",
"url": "http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2008-001.txt"
},
{
"type": "WEB",
"url": "http://wiki.rpath.com/Advisories:rPSA-2008-0112"
},
{
"type": "WEB",
"url": "http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0112"
},
{
"type": "WEB",
"url": "http://www.debian.org/security/2008/dsa-1524"
},
{
"type": "WEB",
"url": "http://www.gentoo.org/security/en/glsa/glsa-200803-31.xml"
},
{
"type": "WEB",
"url": "http://www.kb.cert.org/vuls/id/895609"
},
{
"type": "WEB",
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:069"
},
{
"type": "WEB",
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:070"
},
{
"type": "WEB",
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:071"
},
{
"type": "WEB",
"url": "http://www.redhat.com/support/errata/RHSA-2008-0164.html"
},
{
"type": "WEB",
"url": "http://www.redhat.com/support/errata/RHSA-2008-0180.html"
},
{
"type": "WEB",
"url": "http://www.redhat.com/support/errata/RHSA-2008-0181.html"
},
{
"type": "WEB",
"url": "http://www.redhat.com/support/errata/RHSA-2008-0182.html"
},
{
"type": "WEB",
"url": "http://www.securityfocus.com/archive/1/489761"
},
{
"type": "WEB",
"url": "http://www.securityfocus.com/archive/1/489883/100/0/threaded"
},
{
"type": "WEB",
"url": "http://www.securityfocus.com/archive/1/493080/100/0/threaded"
},
{
"type": "WEB",
"url": "http://www.securityfocus.com/bid/28303"
},
{
"type": "WEB",
"url": "http://www.securitytracker.com/id?1019626"
},
{
"type": "WEB",
"url": "http://www.ubuntu.com/usn/usn-587-1"
},
{
"type": "WEB",
"url": "http://www.vmware.com/security/advisories/VMSA-2008-0009.html"
},
{
"type": "WEB",
"url": "http://www.vupen.com/english/advisories/2008/0922/references"
},
{
"type": "WEB",
"url": "http://www.vupen.com/english/advisories/2008/0924/references"
},
{
"type": "WEB",
"url": "http://www.vupen.com/english/advisories/2008/1102/references"
},
{
"type": "WEB",
"url": "http://www.vupen.com/english/advisories/2008/1744"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
}
]
}
GSD-2008-0062
Vulnerability from gsd - Updated: 2023-12-13 01:22Details
KDC in MIT Kerberos 5 (krb5kdc) does not set a global variable for some krb4 message types, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted messages that trigger a NULL pointer dereference or double-free.
Aliases
Aliases
{
"GSD": {
"alias": "CVE-2008-0062",
"description": "KDC in MIT Kerberos 5 (krb5kdc) does not set a global variable for some krb4 message types, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted messages that trigger a NULL pointer dereference or double-free.",
"id": "GSD-2008-0062",
"references": [
"https://www.suse.com/security/cve/CVE-2008-0062.html",
"https://www.debian.org/security/2008/dsa-1524",
"https://access.redhat.com/errata/RHSA-2008:0182",
"https://access.redhat.com/errata/RHSA-2008:0181",
"https://access.redhat.com/errata/RHSA-2008:0180",
"https://access.redhat.com/errata/RHSA-2008:0164",
"https://linux.oracle.com/cve/CVE-2008-0062.html"
]
},
"gsd": {
"metadata": {
"exploitCode": "unknown",
"remediation": "unknown",
"reportConfidence": "confirmed",
"type": "vulnerability"
},
"osvSchema": {
"aliases": [
"CVE-2008-0062"
],
"details": "KDC in MIT Kerberos 5 (krb5kdc) does not set a global variable for some krb4 message types, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted messages that trigger a NULL pointer dereference or double-free.",
"id": "GSD-2008-0062",
"modified": "2023-12-13T01:22:58.393542Z",
"schema_version": "1.4.0"
}
},
"namespaces": {
"cve.org": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2008-0062",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "KDC in MIT Kerberos 5 (krb5kdc) does not set a global variable for some krb4 message types, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted messages that trigger a NULL pointer dereference or double-free."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "ADV-2008-1744",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2008/1744"
},
{
"name": "29457",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/29457"
},
{
"name": "MDVSA-2008:069",
"refsource": "MANDRIVA",
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:069"
},
{
"name": "29464",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/29464"
},
{
"name": "GLSA-200803-31",
"refsource": "GENTOO",
"url": "http://www.gentoo.org/security/en/glsa/glsa-200803-31.xml"
},
{
"name": "FEDORA-2008-2637",
"refsource": "FEDORA",
"url": "https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00537.html"
},
{
"name": "MDVSA-2008:071",
"refsource": "MANDRIVA",
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:071"
},
{
"name": "http://wiki.rpath.com/Advisories:rPSA-2008-0112",
"refsource": "CONFIRM",
"url": "http://wiki.rpath.com/Advisories:rPSA-2008-0112"
},
{
"name": "http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5022542.html",
"refsource": "CONFIRM",
"url": "http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5022542.html"
},
{
"name": "SSRT100495",
"refsource": "HP",
"url": "http://marc.info/?l=bugtraq\u0026m=130497213107107\u0026w=2"
},
{
"name": "29451",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/29451"
},
{
"name": "29663",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/29663"
},
{
"name": "FEDORA-2008-2647",
"refsource": "FEDORA",
"url": "https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00544.html"
},
{
"name": "http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0112",
"refsource": "CONFIRM",
"url": "http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0112"
},
{
"name": "29438",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/29438"
},
{
"name": "http://www.vmware.com/security/advisories/VMSA-2008-0009.html",
"refsource": "CONFIRM",
"url": "http://www.vmware.com/security/advisories/VMSA-2008-0009.html"
},
{
"name": "oval:org.mitre.oval:def:9496",
"refsource": "OVAL",
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9496"
},
{
"name": "ADV-2008-0924",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2008/0924/references"
},
{
"name": "RHSA-2008:0164",
"refsource": "REDHAT",
"url": "http://www.redhat.com/support/errata/RHSA-2008-0164.html"
},
{
"name": "MDVSA-2008:070",
"refsource": "MANDRIVA",
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:070"
},
{
"name": "ADV-2008-0922",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2008/0922/references"
},
{
"name": "29450",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/29450"
},
{
"name": "29435",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/29435"
},
{
"name": "krb5-kdc-code-execution(41275)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/41275"
},
{
"name": "1019626",
"refsource": "SECTRACK",
"url": "http://www.securitytracker.com/id?1019626"
},
{
"name": "20080319 rPSA-2008-0112-1 krb5 krb5-server krb5-services krb5-test krb5-workstation",
"refsource": "BUGTRAQ",
"url": "http://www.securityfocus.com/archive/1/489883/100/0/threaded"
},
{
"name": "29428",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/29428"
},
{
"name": "29420",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/29420"
},
{
"name": "DSA-1524",
"refsource": "DEBIAN",
"url": "http://www.debian.org/security/2008/dsa-1524"
},
{
"name": "30535",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/30535"
},
{
"name": "APPLE-SA-2008-03-18",
"refsource": "APPLE",
"url": "http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html"
},
{
"name": "RHSA-2008:0182",
"refsource": "REDHAT",
"url": "http://www.redhat.com/support/errata/RHSA-2008-0182.html"
},
{
"name": "http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5022520.html",
"refsource": "CONFIRM",
"url": "http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5022520.html"
},
{
"name": "20080604 VMSA-2008-0009 Updates to VMware Workstation, VMware Player, VMware ACE, VMware Fusion, VMware Server, VMware VIX API, VMware ESX, VMware ESXi resolve critical security issues",
"refsource": "BUGTRAQ",
"url": "http://www.securityfocus.com/archive/1/493080/100/0/threaded"
},
{
"name": "RHSA-2008:0180",
"refsource": "REDHAT",
"url": "http://www.redhat.com/support/errata/RHSA-2008-0180.html"
},
{
"name": "SUSE-SA:2008:016",
"refsource": "SUSE",
"url": "http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00006.html"
},
{
"name": "29516",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/29516"
},
{
"name": "29462",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/29462"
},
{
"name": "29424",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/29424"
},
{
"name": "http://docs.info.apple.com/article.html?artnum=307562",
"refsource": "CONFIRM",
"url": "http://docs.info.apple.com/article.html?artnum=307562"
},
{
"name": "RHSA-2008:0181",
"refsource": "REDHAT",
"url": "http://www.redhat.com/support/errata/RHSA-2008-0181.html"
},
{
"name": "29423",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/29423"
},
{
"name": "USN-587-1",
"refsource": "UBUNTU",
"url": "http://www.ubuntu.com/usn/usn-587-1"
},
{
"name": "ADV-2008-1102",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2008/1102/references"
},
{
"name": "28303",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/28303"
},
{
"name": "http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2008-001.txt",
"refsource": "CONFIRM",
"url": "http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2008-001.txt"
},
{
"name": "20080318 MITKRB5-SA-2008-001: double-free, uninitialized data vulnerabilities in krb5kdc",
"refsource": "BUGTRAQ",
"url": "http://www.securityfocus.com/archive/1/489761"
},
{
"name": "HPSBOV02682",
"refsource": "HP",
"url": "http://marc.info/?l=bugtraq\u0026m=130497213107107\u0026w=2"
},
{
"name": "VU#895609",
"refsource": "CERT-VN",
"url": "http://www.kb.cert.org/vuls/id/895609"
}
]
}
},
"nvd.nist.gov": {
"cve": {
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:mit:kerberos_5:*:*:*:*:*:*:*:*",
"matchCriteriaId": "904FBF9F-9269-4088-BD5A-3C773E6F841E",
"versionEndIncluding": "1.6.3",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:debian:debian_linux:3.1:*:*:*:*:*:*:*",
"matchCriteriaId": "A2E0C1F8-31F5-4F61-9DF7-E49B43D3C873",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*",
"matchCriteriaId": "0F92AB32-E7DE-43F4-B877-1F41FA162EC7",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*",
"matchCriteriaId": "454A5D17-B171-4F1F-9E0B-F18D1E5CA9FD",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:canonical:ubuntu_linux:6.10:*:*:*:*:*:*:*",
"matchCriteriaId": "23E304C9-F780-4358-A58D-1E4C93977704",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:canonical:ubuntu_linux:7.04:*:*:*:*:*:*:*",
"matchCriteriaId": "6EBDAFF8-DE44-4E80-B6BD-E341F767F501",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:canonical:ubuntu_linux:7.10:*:*:*:*:*:*:*",
"matchCriteriaId": "823BF8BE-2309-4F67-A5E2-EAD98F723468",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:fedoraproject:fedora:7:*:*:*:*:*:*:*",
"matchCriteriaId": "E3EFD171-01F7-450B-B6F3-0F7E443A2337",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:fedoraproject:fedora:8:*:*:*:*:*:*:*",
"matchCriteriaId": "72E4DB7F-07C3-46BB-AAA2-05CD0312C57F",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "KDC in MIT Kerberos 5 (krb5kdc) does not set a global variable for some krb4 message types, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted messages that trigger a NULL pointer dereference or double-free."
},
{
"lang": "es",
"value": "KDC en MIT Kerberos 5 (krb5kdc) no fija variable global alguna para determinados tipos de mensaje krb4, la cual permite a atacantes remotos provocar una denegaci\u00f3n de servicio (ca\u00edda) y posiblemente ejecuci\u00f3n de c\u00f3digo de su elecci\u00f3n mediante mensajes manipulados que disparan una referencia a un puntero nulo o doble liberaci\u00f3n de memoria (double-free)."
}
],
"id": "CVE-2008-0062",
"lastModified": "2024-02-09T00:42:52.807",
"metrics": {
"cvssMetricV2": [
{
"acInsufInfo": false,
"baseSeverity": "HIGH",
"cvssData": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "COMPLETE",
"baseScore": 9.3,
"confidentialityImpact": "COMPLETE",
"integrityImpact": "COMPLETE",
"vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C",
"version": "2.0"
},
"exploitabilityScore": 8.6,
"impactScore": 10.0,
"obtainAllPrivilege": true,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"source": "nvd@nist.gov",
"type": "Primary",
"userInteractionRequired": false
}
],
"cvssMetricV31": [
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"exploitabilityScore": 3.9,
"impactScore": 5.9,
"source": "nvd@nist.gov",
"type": "Primary"
}
]
},
"published": "2008-03-19T10:44:00.000",
"references": [
{
"source": "cve@mitre.org",
"tags": [
"Broken Link"
],
"url": "http://docs.info.apple.com/article.html?artnum=307562"
},
{
"source": "cve@mitre.org",
"tags": [
"Mailing List"
],
"url": "http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html"
},
{
"source": "cve@mitre.org",
"tags": [
"Mailing List"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00006.html"
},
{
"source": "cve@mitre.org",
"tags": [
"Mailing List"
],
"url": "http://marc.info/?l=bugtraq\u0026m=130497213107107\u0026w=2"
},
{
"source": "cve@mitre.org",
"tags": [
"Broken Link"
],
"url": "http://secunia.com/advisories/29420"
},
{
"source": "cve@mitre.org",
"tags": [
"Broken Link"
],
"url": "http://secunia.com/advisories/29423"
},
{
"source": "cve@mitre.org",
"tags": [
"Broken Link"
],
"url": "http://secunia.com/advisories/29424"
},
{
"source": "cve@mitre.org",
"tags": [
"Broken Link"
],
"url": "http://secunia.com/advisories/29428"
},
{
"source": "cve@mitre.org",
"tags": [
"Broken Link"
],
"url": "http://secunia.com/advisories/29435"
},
{
"source": "cve@mitre.org",
"tags": [
"Broken Link"
],
"url": "http://secunia.com/advisories/29438"
},
{
"source": "cve@mitre.org",
"tags": [
"Broken Link"
],
"url": "http://secunia.com/advisories/29450"
},
{
"source": "cve@mitre.org",
"tags": [
"Broken Link"
],
"url": "http://secunia.com/advisories/29451"
},
{
"source": "cve@mitre.org",
"tags": [
"Broken Link"
],
"url": "http://secunia.com/advisories/29457"
},
{
"source": "cve@mitre.org",
"tags": [
"Broken Link"
],
"url": "http://secunia.com/advisories/29462"
},
{
"source": "cve@mitre.org",
"tags": [
"Broken Link"
],
"url": "http://secunia.com/advisories/29464"
},
{
"source": "cve@mitre.org",
"tags": [
"Broken Link"
],
"url": "http://secunia.com/advisories/29516"
},
{
"source": "cve@mitre.org",
"tags": [
"Broken Link"
],
"url": "http://secunia.com/advisories/29663"
},
{
"source": "cve@mitre.org",
"tags": [
"Broken Link"
],
"url": "http://secunia.com/advisories/30535"
},
{
"source": "cve@mitre.org",
"tags": [
"Broken Link"
],
"url": "http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5022520.html"
},
{
"source": "cve@mitre.org",
"tags": [
"Broken Link"
],
"url": "http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5022542.html"
},
{
"source": "cve@mitre.org",
"tags": [
"Third Party Advisory"
],
"url": "http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2008-001.txt"
},
{
"source": "cve@mitre.org",
"tags": [
"Broken Link"
],
"url": "http://wiki.rpath.com/Advisories:rPSA-2008-0112"
},
{
"source": "cve@mitre.org",
"tags": [
"Broken Link"
],
"url": "http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0112"
},
{
"source": "cve@mitre.org",
"tags": [
"Third Party Advisory"
],
"url": "http://www.debian.org/security/2008/dsa-1524"
},
{
"source": "cve@mitre.org",
"tags": [
"Third Party Advisory"
],
"url": "http://www.gentoo.org/security/en/glsa/glsa-200803-31.xml"
},
{
"source": "cve@mitre.org",
"tags": [
"Third Party Advisory",
"US Government Resource"
],
"url": "http://www.kb.cert.org/vuls/id/895609"
},
{
"source": "cve@mitre.org",
"tags": [
"Broken Link"
],
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:069"
},
{
"source": "cve@mitre.org",
"tags": [
"Broken Link"
],
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:070"
},
{
"source": "cve@mitre.org",
"tags": [
"Broken Link"
],
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:071"
},
{
"source": "cve@mitre.org",
"tags": [
"Broken Link"
],
"url": "http://www.redhat.com/support/errata/RHSA-2008-0164.html"
},
{
"source": "cve@mitre.org",
"tags": [
"Broken Link"
],
"url": "http://www.redhat.com/support/errata/RHSA-2008-0180.html"
},
{
"source": "cve@mitre.org",
"tags": [
"Broken Link"
],
"url": "http://www.redhat.com/support/errata/RHSA-2008-0181.html"
},
{
"source": "cve@mitre.org",
"tags": [
"Broken Link"
],
"url": "http://www.redhat.com/support/errata/RHSA-2008-0182.html"
},
{
"source": "cve@mitre.org",
"tags": [
"Broken Link",
"Third Party Advisory",
"VDB Entry"
],
"url": "http://www.securityfocus.com/archive/1/489761"
},
{
"source": "cve@mitre.org",
"tags": [
"Broken Link",
"Third Party Advisory",
"VDB Entry"
],
"url": "http://www.securityfocus.com/archive/1/489883/100/0/threaded"
},
{
"source": "cve@mitre.org",
"tags": [
"Broken Link",
"Third Party Advisory",
"VDB Entry"
],
"url": "http://www.securityfocus.com/archive/1/493080/100/0/threaded"
},
{
"source": "cve@mitre.org",
"tags": [
"Broken Link",
"Third Party Advisory",
"VDB Entry"
],
"url": "http://www.securityfocus.com/bid/28303"
},
{
"source": "cve@mitre.org",
"tags": [
"Broken Link",
"Third Party Advisory",
"VDB Entry"
],
"url": "http://www.securitytracker.com/id?1019626"
},
{
"source": "cve@mitre.org",
"tags": [
"Third Party Advisory"
],
"url": "http://www.ubuntu.com/usn/usn-587-1"
},
{
"source": "cve@mitre.org",
"tags": [
"Third Party Advisory"
],
"url": "http://www.vmware.com/security/advisories/VMSA-2008-0009.html"
},
{
"source": "cve@mitre.org",
"tags": [
"Broken Link"
],
"url": "http://www.vupen.com/english/advisories/2008/0922/references"
},
{
"source": "cve@mitre.org",
"tags": [
"Broken Link"
],
"url": "http://www.vupen.com/english/advisories/2008/0924/references"
},
{
"source": "cve@mitre.org",
"tags": [
"Broken Link"
],
"url": "http://www.vupen.com/english/advisories/2008/1102/references"
},
{
"source": "cve@mitre.org",
"tags": [
"Broken Link"
],
"url": "http://www.vupen.com/english/advisories/2008/1744"
},
{
"source": "cve@mitre.org",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/41275"
},
{
"source": "cve@mitre.org",
"tags": [
"Broken Link"
],
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9496"
},
{
"source": "cve@mitre.org",
"tags": [
"Mailing List"
],
"url": "https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00537.html"
},
{
"source": "cve@mitre.org",
"tags": [
"Mailing List"
],
"url": "https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00544.html"
}
],
"sourceIdentifier": "cve@mitre.org",
"vulnStatus": "Analyzed",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-665"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
}
]
}
}
}
}
OPENSUSE-SU-2024:10899-1
Vulnerability from csaf_opensuse - Published: 2024-06-15 00:00 - Updated: 2024-06-15 00:00Summary
krb5-1.19.2-2.2 on GA media
Severity
Moderate
Notes
Title of the patch: krb5-1.19.2-2.2 on GA media
Description of the patch: These are all security issues fixed in the krb5-1.19.2-2.2 package on the GA media of openSUSE Tumbleweed.
Patchnames: openSUSE-Tumbleweed-2024-10899
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
Affected products
Recommended
40 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:krb5-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-client-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-client-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-client-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-client-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-server-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-server-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-server-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-server-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
Threats
Impact
critical
Affected products
Recommended
40 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:krb5-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-client-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-client-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-client-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-client-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-server-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-server-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-server-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-server-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
40 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:krb5-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-client-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-client-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-client-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-client-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-server-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-server-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-server-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-server-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
Threats
Impact
critical
Affected products
Recommended
40 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:krb5-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-client-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-client-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-client-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-client-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-server-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-server-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-server-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-server-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
Affected products
Recommended
40 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:krb5-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-client-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-client-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-client-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-client-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-server-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-server-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-server-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-server-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
Affected products
Recommended
40 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:krb5-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-client-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-client-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-client-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-client-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-server-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-server-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-server-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-server-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
Threats
Impact
critical
Affected products
Recommended
40 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:krb5-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-client-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-client-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-client-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-client-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-server-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-server-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-server-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-server-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
Affected products
Recommended
40 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:krb5-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-client-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-client-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-client-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-client-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-server-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-server-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-server-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-server-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
Threats
Impact
critical
Affected products
Recommended
40 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:krb5-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-client-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-client-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-client-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-client-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-server-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-server-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-server-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-server-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
Affected products
Recommended
40 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:krb5-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-client-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-client-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-client-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-client-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-server-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-server-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-server-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-server-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
Threats
Impact
critical
Affected products
Recommended
40 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:krb5-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-client-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-client-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-client-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-client-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-server-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-server-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-server-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-server-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
Threats
Impact
critical
Affected products
Recommended
40 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:krb5-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-client-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-client-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-client-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-client-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-server-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-server-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-server-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-server-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
40 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:krb5-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-client-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-client-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-client-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-client-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-server-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-server-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-server-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-server-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
9.8 (Critical)
Affected products
Recommended
40 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:krb5-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-client-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-client-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-client-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-client-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-server-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-server-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-server-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-server-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
Threats
Impact
critical
Affected products
Recommended
40 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:krb5-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-client-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-client-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-client-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-client-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-server-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-server-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-server-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-server-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
Threats
Impact
critical
6.5 (Medium)
Affected products
Recommended
40 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:krb5-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-client-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-client-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-client-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-client-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-server-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-server-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-server-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-server-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
5.3 (Medium)
Affected products
Recommended
40 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:krb5-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-client-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-client-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-client-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-client-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-server-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-server-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-server-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-server-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
7.2 (High)
Affected products
Recommended
40 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:krb5-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-client-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-client-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-client-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-client-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-server-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-server-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-server-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-server-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
7.5 (High)
Affected products
Recommended
40 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:krb5-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-client-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-client-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-client-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-client-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-server-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-server-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-server-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-server-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
6.5 (Medium)
Affected products
Recommended
40 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:krb5-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-client-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-client-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-client-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-client-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-server-1.19.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-server-1.19.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-server-1.19.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:krb5-server-1.19.2-2.2.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
References
77 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "krb5-1.19.2-2.2 on GA media",
"title": "Title of the patch"
},
{
"category": "description",
"text": "These are all security issues fixed in the krb5-1.19.2-2.2 package on the GA media of openSUSE Tumbleweed.",
"title": "Description of the patch"
},
{
"category": "details",
"text": "openSUSE-Tumbleweed-2024-10899",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2024_10899-1.json"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2006-6143 page",
"url": "https://www.suse.com/security/cve/CVE-2006-6143/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2006-6144 page",
"url": "https://www.suse.com/security/cve/CVE-2006-6144/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2007-0956 page",
"url": "https://www.suse.com/security/cve/CVE-2007-0956/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2007-0957 page",
"url": "https://www.suse.com/security/cve/CVE-2007-0957/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2007-1216 page",
"url": "https://www.suse.com/security/cve/CVE-2007-1216/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2007-2442 page",
"url": "https://www.suse.com/security/cve/CVE-2007-2442/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2007-2798 page",
"url": "https://www.suse.com/security/cve/CVE-2007-2798/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2007-3999 page",
"url": "https://www.suse.com/security/cve/CVE-2007-3999/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2007-4000 page",
"url": "https://www.suse.com/security/cve/CVE-2007-4000/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2007-5894 page",
"url": "https://www.suse.com/security/cve/CVE-2007-5894/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2007-5902 page",
"url": "https://www.suse.com/security/cve/CVE-2007-5902/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2007-5971 page",
"url": "https://www.suse.com/security/cve/CVE-2007-5971/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2007-5972 page",
"url": "https://www.suse.com/security/cve/CVE-2007-5972/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2008-0062 page",
"url": "https://www.suse.com/security/cve/CVE-2008-0062/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2008-0947 page",
"url": "https://www.suse.com/security/cve/CVE-2008-0947/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-11368 page",
"url": "https://www.suse.com/security/cve/CVE-2017-11368/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-11462 page",
"url": "https://www.suse.com/security/cve/CVE-2017-11462/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-5729 page",
"url": "https://www.suse.com/security/cve/CVE-2018-5729/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-36222 page",
"url": "https://www.suse.com/security/cve/CVE-2021-36222/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-37750 page",
"url": "https://www.suse.com/security/cve/CVE-2021-37750/"
}
],
"title": "krb5-1.19.2-2.2 on GA media",
"tracking": {
"current_release_date": "2024-06-15T00:00:00Z",
"generator": {
"date": "2024-06-15T00:00:00Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "openSUSE-SU-2024:10899-1",
"initial_release_date": "2024-06-15T00:00:00Z",
"revision_history": [
{
"date": "2024-06-15T00:00:00Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "krb5-1.19.2-2.2.aarch64",
"product": {
"name": "krb5-1.19.2-2.2.aarch64",
"product_id": "krb5-1.19.2-2.2.aarch64"
}
},
{
"category": "product_version",
"name": "krb5-32bit-1.19.2-2.2.aarch64",
"product": {
"name": "krb5-32bit-1.19.2-2.2.aarch64",
"product_id": "krb5-32bit-1.19.2-2.2.aarch64"
}
},
{
"category": "product_version",
"name": "krb5-client-1.19.2-2.2.aarch64",
"product": {
"name": "krb5-client-1.19.2-2.2.aarch64",
"product_id": "krb5-client-1.19.2-2.2.aarch64"
}
},
{
"category": "product_version",
"name": "krb5-devel-1.19.2-2.2.aarch64",
"product": {
"name": "krb5-devel-1.19.2-2.2.aarch64",
"product_id": "krb5-devel-1.19.2-2.2.aarch64"
}
},
{
"category": "product_version",
"name": "krb5-devel-32bit-1.19.2-2.2.aarch64",
"product": {
"name": "krb5-devel-32bit-1.19.2-2.2.aarch64",
"product_id": "krb5-devel-32bit-1.19.2-2.2.aarch64"
}
},
{
"category": "product_version",
"name": "krb5-plugin-kdb-ldap-1.19.2-2.2.aarch64",
"product": {
"name": "krb5-plugin-kdb-ldap-1.19.2-2.2.aarch64",
"product_id": "krb5-plugin-kdb-ldap-1.19.2-2.2.aarch64"
}
},
{
"category": "product_version",
"name": "krb5-plugin-preauth-otp-1.19.2-2.2.aarch64",
"product": {
"name": "krb5-plugin-preauth-otp-1.19.2-2.2.aarch64",
"product_id": "krb5-plugin-preauth-otp-1.19.2-2.2.aarch64"
}
},
{
"category": "product_version",
"name": "krb5-plugin-preauth-pkinit-1.19.2-2.2.aarch64",
"product": {
"name": "krb5-plugin-preauth-pkinit-1.19.2-2.2.aarch64",
"product_id": "krb5-plugin-preauth-pkinit-1.19.2-2.2.aarch64"
}
},
{
"category": "product_version",
"name": "krb5-plugin-preauth-spake-1.19.2-2.2.aarch64",
"product": {
"name": "krb5-plugin-preauth-spake-1.19.2-2.2.aarch64",
"product_id": "krb5-plugin-preauth-spake-1.19.2-2.2.aarch64"
}
},
{
"category": "product_version",
"name": "krb5-server-1.19.2-2.2.aarch64",
"product": {
"name": "krb5-server-1.19.2-2.2.aarch64",
"product_id": "krb5-server-1.19.2-2.2.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "krb5-1.19.2-2.2.ppc64le",
"product": {
"name": "krb5-1.19.2-2.2.ppc64le",
"product_id": "krb5-1.19.2-2.2.ppc64le"
}
},
{
"category": "product_version",
"name": "krb5-32bit-1.19.2-2.2.ppc64le",
"product": {
"name": "krb5-32bit-1.19.2-2.2.ppc64le",
"product_id": "krb5-32bit-1.19.2-2.2.ppc64le"
}
},
{
"category": "product_version",
"name": "krb5-client-1.19.2-2.2.ppc64le",
"product": {
"name": "krb5-client-1.19.2-2.2.ppc64le",
"product_id": "krb5-client-1.19.2-2.2.ppc64le"
}
},
{
"category": "product_version",
"name": "krb5-devel-1.19.2-2.2.ppc64le",
"product": {
"name": "krb5-devel-1.19.2-2.2.ppc64le",
"product_id": "krb5-devel-1.19.2-2.2.ppc64le"
}
},
{
"category": "product_version",
"name": "krb5-devel-32bit-1.19.2-2.2.ppc64le",
"product": {
"name": "krb5-devel-32bit-1.19.2-2.2.ppc64le",
"product_id": "krb5-devel-32bit-1.19.2-2.2.ppc64le"
}
},
{
"category": "product_version",
"name": "krb5-plugin-kdb-ldap-1.19.2-2.2.ppc64le",
"product": {
"name": "krb5-plugin-kdb-ldap-1.19.2-2.2.ppc64le",
"product_id": "krb5-plugin-kdb-ldap-1.19.2-2.2.ppc64le"
}
},
{
"category": "product_version",
"name": "krb5-plugin-preauth-otp-1.19.2-2.2.ppc64le",
"product": {
"name": "krb5-plugin-preauth-otp-1.19.2-2.2.ppc64le",
"product_id": "krb5-plugin-preauth-otp-1.19.2-2.2.ppc64le"
}
},
{
"category": "product_version",
"name": "krb5-plugin-preauth-pkinit-1.19.2-2.2.ppc64le",
"product": {
"name": "krb5-plugin-preauth-pkinit-1.19.2-2.2.ppc64le",
"product_id": "krb5-plugin-preauth-pkinit-1.19.2-2.2.ppc64le"
}
},
{
"category": "product_version",
"name": "krb5-plugin-preauth-spake-1.19.2-2.2.ppc64le",
"product": {
"name": "krb5-plugin-preauth-spake-1.19.2-2.2.ppc64le",
"product_id": "krb5-plugin-preauth-spake-1.19.2-2.2.ppc64le"
}
},
{
"category": "product_version",
"name": "krb5-server-1.19.2-2.2.ppc64le",
"product": {
"name": "krb5-server-1.19.2-2.2.ppc64le",
"product_id": "krb5-server-1.19.2-2.2.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "krb5-1.19.2-2.2.s390x",
"product": {
"name": "krb5-1.19.2-2.2.s390x",
"product_id": "krb5-1.19.2-2.2.s390x"
}
},
{
"category": "product_version",
"name": "krb5-32bit-1.19.2-2.2.s390x",
"product": {
"name": "krb5-32bit-1.19.2-2.2.s390x",
"product_id": "krb5-32bit-1.19.2-2.2.s390x"
}
},
{
"category": "product_version",
"name": "krb5-client-1.19.2-2.2.s390x",
"product": {
"name": "krb5-client-1.19.2-2.2.s390x",
"product_id": "krb5-client-1.19.2-2.2.s390x"
}
},
{
"category": "product_version",
"name": "krb5-devel-1.19.2-2.2.s390x",
"product": {
"name": "krb5-devel-1.19.2-2.2.s390x",
"product_id": "krb5-devel-1.19.2-2.2.s390x"
}
},
{
"category": "product_version",
"name": "krb5-devel-32bit-1.19.2-2.2.s390x",
"product": {
"name": "krb5-devel-32bit-1.19.2-2.2.s390x",
"product_id": "krb5-devel-32bit-1.19.2-2.2.s390x"
}
},
{
"category": "product_version",
"name": "krb5-plugin-kdb-ldap-1.19.2-2.2.s390x",
"product": {
"name": "krb5-plugin-kdb-ldap-1.19.2-2.2.s390x",
"product_id": "krb5-plugin-kdb-ldap-1.19.2-2.2.s390x"
}
},
{
"category": "product_version",
"name": "krb5-plugin-preauth-otp-1.19.2-2.2.s390x",
"product": {
"name": "krb5-plugin-preauth-otp-1.19.2-2.2.s390x",
"product_id": "krb5-plugin-preauth-otp-1.19.2-2.2.s390x"
}
},
{
"category": "product_version",
"name": "krb5-plugin-preauth-pkinit-1.19.2-2.2.s390x",
"product": {
"name": "krb5-plugin-preauth-pkinit-1.19.2-2.2.s390x",
"product_id": "krb5-plugin-preauth-pkinit-1.19.2-2.2.s390x"
}
},
{
"category": "product_version",
"name": "krb5-plugin-preauth-spake-1.19.2-2.2.s390x",
"product": {
"name": "krb5-plugin-preauth-spake-1.19.2-2.2.s390x",
"product_id": "krb5-plugin-preauth-spake-1.19.2-2.2.s390x"
}
},
{
"category": "product_version",
"name": "krb5-server-1.19.2-2.2.s390x",
"product": {
"name": "krb5-server-1.19.2-2.2.s390x",
"product_id": "krb5-server-1.19.2-2.2.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "krb5-1.19.2-2.2.x86_64",
"product": {
"name": "krb5-1.19.2-2.2.x86_64",
"product_id": "krb5-1.19.2-2.2.x86_64"
}
},
{
"category": "product_version",
"name": "krb5-32bit-1.19.2-2.2.x86_64",
"product": {
"name": "krb5-32bit-1.19.2-2.2.x86_64",
"product_id": "krb5-32bit-1.19.2-2.2.x86_64"
}
},
{
"category": "product_version",
"name": "krb5-client-1.19.2-2.2.x86_64",
"product": {
"name": "krb5-client-1.19.2-2.2.x86_64",
"product_id": "krb5-client-1.19.2-2.2.x86_64"
}
},
{
"category": "product_version",
"name": "krb5-devel-1.19.2-2.2.x86_64",
"product": {
"name": "krb5-devel-1.19.2-2.2.x86_64",
"product_id": "krb5-devel-1.19.2-2.2.x86_64"
}
},
{
"category": "product_version",
"name": "krb5-devel-32bit-1.19.2-2.2.x86_64",
"product": {
"name": "krb5-devel-32bit-1.19.2-2.2.x86_64",
"product_id": "krb5-devel-32bit-1.19.2-2.2.x86_64"
}
},
{
"category": "product_version",
"name": "krb5-plugin-kdb-ldap-1.19.2-2.2.x86_64",
"product": {
"name": "krb5-plugin-kdb-ldap-1.19.2-2.2.x86_64",
"product_id": "krb5-plugin-kdb-ldap-1.19.2-2.2.x86_64"
}
},
{
"category": "product_version",
"name": "krb5-plugin-preauth-otp-1.19.2-2.2.x86_64",
"product": {
"name": "krb5-plugin-preauth-otp-1.19.2-2.2.x86_64",
"product_id": "krb5-plugin-preauth-otp-1.19.2-2.2.x86_64"
}
},
{
"category": "product_version",
"name": "krb5-plugin-preauth-pkinit-1.19.2-2.2.x86_64",
"product": {
"name": "krb5-plugin-preauth-pkinit-1.19.2-2.2.x86_64",
"product_id": "krb5-plugin-preauth-pkinit-1.19.2-2.2.x86_64"
}
},
{
"category": "product_version",
"name": "krb5-plugin-preauth-spake-1.19.2-2.2.x86_64",
"product": {
"name": "krb5-plugin-preauth-spake-1.19.2-2.2.x86_64",
"product_id": "krb5-plugin-preauth-spake-1.19.2-2.2.x86_64"
}
},
{
"category": "product_version",
"name": "krb5-server-1.19.2-2.2.x86_64",
"product": {
"name": "krb5-server-1.19.2-2.2.x86_64",
"product_id": "krb5-server-1.19.2-2.2.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "openSUSE Tumbleweed",
"product": {
"name": "openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:tumbleweed"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-1.19.2-2.2.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:krb5-1.19.2-2.2.aarch64"
},
"product_reference": "krb5-1.19.2-2.2.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-1.19.2-2.2.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:krb5-1.19.2-2.2.ppc64le"
},
"product_reference": "krb5-1.19.2-2.2.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-1.19.2-2.2.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:krb5-1.19.2-2.2.s390x"
},
"product_reference": "krb5-1.19.2-2.2.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-1.19.2-2.2.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:krb5-1.19.2-2.2.x86_64"
},
"product_reference": "krb5-1.19.2-2.2.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-32bit-1.19.2-2.2.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.aarch64"
},
"product_reference": "krb5-32bit-1.19.2-2.2.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-32bit-1.19.2-2.2.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.ppc64le"
},
"product_reference": "krb5-32bit-1.19.2-2.2.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-32bit-1.19.2-2.2.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.s390x"
},
"product_reference": "krb5-32bit-1.19.2-2.2.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-32bit-1.19.2-2.2.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.x86_64"
},
"product_reference": "krb5-32bit-1.19.2-2.2.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-client-1.19.2-2.2.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.aarch64"
},
"product_reference": "krb5-client-1.19.2-2.2.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-client-1.19.2-2.2.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.ppc64le"
},
"product_reference": "krb5-client-1.19.2-2.2.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-client-1.19.2-2.2.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.s390x"
},
"product_reference": "krb5-client-1.19.2-2.2.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-client-1.19.2-2.2.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.x86_64"
},
"product_reference": "krb5-client-1.19.2-2.2.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-devel-1.19.2-2.2.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.aarch64"
},
"product_reference": "krb5-devel-1.19.2-2.2.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-devel-1.19.2-2.2.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.ppc64le"
},
"product_reference": "krb5-devel-1.19.2-2.2.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-devel-1.19.2-2.2.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.s390x"
},
"product_reference": "krb5-devel-1.19.2-2.2.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-devel-1.19.2-2.2.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.x86_64"
},
"product_reference": "krb5-devel-1.19.2-2.2.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-devel-32bit-1.19.2-2.2.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.aarch64"
},
"product_reference": "krb5-devel-32bit-1.19.2-2.2.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-devel-32bit-1.19.2-2.2.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.ppc64le"
},
"product_reference": "krb5-devel-32bit-1.19.2-2.2.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-devel-32bit-1.19.2-2.2.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.s390x"
},
"product_reference": "krb5-devel-32bit-1.19.2-2.2.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-devel-32bit-1.19.2-2.2.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.x86_64"
},
"product_reference": "krb5-devel-32bit-1.19.2-2.2.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-plugin-kdb-ldap-1.19.2-2.2.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.aarch64"
},
"product_reference": "krb5-plugin-kdb-ldap-1.19.2-2.2.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-plugin-kdb-ldap-1.19.2-2.2.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.ppc64le"
},
"product_reference": "krb5-plugin-kdb-ldap-1.19.2-2.2.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-plugin-kdb-ldap-1.19.2-2.2.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.s390x"
},
"product_reference": "krb5-plugin-kdb-ldap-1.19.2-2.2.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-plugin-kdb-ldap-1.19.2-2.2.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.x86_64"
},
"product_reference": "krb5-plugin-kdb-ldap-1.19.2-2.2.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-plugin-preauth-otp-1.19.2-2.2.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.aarch64"
},
"product_reference": "krb5-plugin-preauth-otp-1.19.2-2.2.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-plugin-preauth-otp-1.19.2-2.2.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.ppc64le"
},
"product_reference": "krb5-plugin-preauth-otp-1.19.2-2.2.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-plugin-preauth-otp-1.19.2-2.2.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.s390x"
},
"product_reference": "krb5-plugin-preauth-otp-1.19.2-2.2.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-plugin-preauth-otp-1.19.2-2.2.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.x86_64"
},
"product_reference": "krb5-plugin-preauth-otp-1.19.2-2.2.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-plugin-preauth-pkinit-1.19.2-2.2.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.aarch64"
},
"product_reference": "krb5-plugin-preauth-pkinit-1.19.2-2.2.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-plugin-preauth-pkinit-1.19.2-2.2.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.ppc64le"
},
"product_reference": "krb5-plugin-preauth-pkinit-1.19.2-2.2.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-plugin-preauth-pkinit-1.19.2-2.2.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.s390x"
},
"product_reference": "krb5-plugin-preauth-pkinit-1.19.2-2.2.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-plugin-preauth-pkinit-1.19.2-2.2.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.x86_64"
},
"product_reference": "krb5-plugin-preauth-pkinit-1.19.2-2.2.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-plugin-preauth-spake-1.19.2-2.2.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.aarch64"
},
"product_reference": "krb5-plugin-preauth-spake-1.19.2-2.2.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-plugin-preauth-spake-1.19.2-2.2.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.ppc64le"
},
"product_reference": "krb5-plugin-preauth-spake-1.19.2-2.2.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-plugin-preauth-spake-1.19.2-2.2.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.s390x"
},
"product_reference": "krb5-plugin-preauth-spake-1.19.2-2.2.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-plugin-preauth-spake-1.19.2-2.2.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.x86_64"
},
"product_reference": "krb5-plugin-preauth-spake-1.19.2-2.2.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-server-1.19.2-2.2.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.aarch64"
},
"product_reference": "krb5-server-1.19.2-2.2.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-server-1.19.2-2.2.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.ppc64le"
},
"product_reference": "krb5-server-1.19.2-2.2.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-server-1.19.2-2.2.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.s390x"
},
"product_reference": "krb5-server-1.19.2-2.2.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-server-1.19.2-2.2.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.x86_64"
},
"product_reference": "krb5-server-1.19.2-2.2.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2006-6143",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2006-6143"
}
],
"notes": [
{
"category": "general",
"text": "The RPC library in Kerberos 5 1.4 through 1.4.4, and 1.5 through 1.5.1, as used in Kerberos administration daemon (kadmind) and other products that use this library, calls an uninitialized function pointer in freed memory, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:krb5-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2006-6143",
"url": "https://www.suse.com/security/cve/CVE-2006-6143"
},
{
"category": "external",
"summary": "SUSE Bug 225990 for CVE-2006-6143",
"url": "https://bugzilla.suse.com/225990"
},
{
"category": "external",
"summary": "SUSE Bug 225992 for CVE-2006-6143",
"url": "https://bugzilla.suse.com/225992"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:krb5-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2006-6143"
},
{
"cve": "CVE-2006-6144",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2006-6144"
}
],
"notes": [
{
"category": "general",
"text": "The \"mechglue\" abstraction interface of the GSS-API library for Kerberos 5 1.5 through 1.5.1, as used in Kerberos administration daemon (kadmind) and other products that use this library, allows remote attackers to cause a denial of service (crash) via unspecified vectors that cause mechglue to free uninitialized pointers.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:krb5-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2006-6144",
"url": "https://www.suse.com/security/cve/CVE-2006-6144"
},
{
"category": "external",
"summary": "SUSE Bug 225990 for CVE-2006-6144",
"url": "https://bugzilla.suse.com/225990"
},
{
"category": "external",
"summary": "SUSE Bug 225992 for CVE-2006-6144",
"url": "https://bugzilla.suse.com/225992"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:krb5-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2006-6144"
},
{
"cve": "CVE-2007-0956",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2007-0956"
}
],
"notes": [
{
"category": "general",
"text": "The telnet daemon (telnetd) in MIT krb5 before 1.6.1 allows remote attackers to bypass authentication and gain system access via a username beginning with a \u0027-\u0027 character, a similar issue to CVE-2007-0882.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:krb5-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2007-0956",
"url": "https://www.suse.com/security/cve/CVE-2007-0956"
},
{
"category": "external",
"summary": "SUSE Bug 247765 for CVE-2007-0956",
"url": "https://bugzilla.suse.com/247765"
},
{
"category": "external",
"summary": "SUSE Bug 256319 for CVE-2007-0956",
"url": "https://bugzilla.suse.com/256319"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:krb5-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2007-0956"
},
{
"cve": "CVE-2007-0957",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2007-0957"
}
],
"notes": [
{
"category": "general",
"text": "Stack-based buffer overflow in the krb5_klog_syslog function in the kadm5 library, as used by the Kerberos administration daemon (kadmind) and Key Distribution Center (KDC), in MIT krb5 before 1.6.1 allows remote authenticated users to execute arbitrary code and modify the Kerberos key database via crafted arguments, possibly involving certain format string specifiers.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:krb5-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2007-0957",
"url": "https://www.suse.com/security/cve/CVE-2007-0957"
},
{
"category": "external",
"summary": "SUSE Bug 253548 for CVE-2007-0957",
"url": "https://bugzilla.suse.com/253548"
},
{
"category": "external",
"summary": "SUSE Bug 256319 for CVE-2007-0957",
"url": "https://bugzilla.suse.com/256319"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:krb5-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2007-0957"
},
{
"cve": "CVE-2007-1216",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2007-1216"
}
],
"notes": [
{
"category": "general",
"text": "Double free vulnerability in the GSS-API library (lib/gssapi/krb5/k5unseal.c), as used by the Kerberos administration daemon (kadmind) in MIT krb5 before 1.6.1, when used with the authentication method provided by the RPCSEC_GSS RPC library, allows remote authenticated users to execute arbitrary code and modify the Kerberos key database via a message with an \"an invalid direction encoding\".",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:krb5-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2007-1216",
"url": "https://www.suse.com/security/cve/CVE-2007-1216"
},
{
"category": "external",
"summary": "SUSE Bug 252487 for CVE-2007-1216",
"url": "https://bugzilla.suse.com/252487"
},
{
"category": "external",
"summary": "SUSE Bug 256319 for CVE-2007-1216",
"url": "https://bugzilla.suse.com/256319"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:krb5-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2007-1216"
},
{
"cve": "CVE-2007-2442",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2007-2442"
}
],
"notes": [
{
"category": "general",
"text": "The gssrpc__svcauth_gssapi function in the RPC library in MIT Kerberos 5 (krb5) 1.6.1 and earlier might allow remote attackers to execute arbitrary code via a zero-length RPC credential, which causes kadmind to free an uninitialized pointer during cleanup.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:krb5-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2007-2442",
"url": "https://www.suse.com/security/cve/CVE-2007-2442"
},
{
"category": "external",
"summary": "SUSE Bug 271191 for CVE-2007-2442",
"url": "https://bugzilla.suse.com/271191"
},
{
"category": "external",
"summary": "SUSE Bug 283681 for CVE-2007-2442",
"url": "https://bugzilla.suse.com/283681"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:krb5-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2007-2442"
},
{
"cve": "CVE-2007-2798",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2007-2798"
}
],
"notes": [
{
"category": "general",
"text": "Stack-based buffer overflow in the rename_principal_2_svc function in kadmind for MIT Kerberos 1.5.3, 1.6.1, and other versions allows remote authenticated users to execute arbitrary code via a crafted request to rename a principal.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:krb5-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2007-2798",
"url": "https://www.suse.com/security/cve/CVE-2007-2798"
},
{
"category": "external",
"summary": "SUSE Bug 278689 for CVE-2007-2798",
"url": "https://bugzilla.suse.com/278689"
},
{
"category": "external",
"summary": "SUSE Bug 283681 for CVE-2007-2798",
"url": "https://bugzilla.suse.com/283681"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:krb5-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2007-2798"
},
{
"cve": "CVE-2007-3999",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2007-3999"
}
],
"notes": [
{
"category": "general",
"text": "Stack-based buffer overflow in the svcauth_gss_validate function in lib/rpc/svc_auth_gss.c in the RPCSEC_GSS RPC library (librpcsecgss) in MIT Kerberos 5 (krb5) 1.4 through 1.6.2, as used by the Kerberos administration daemon (kadmind) and some third-party applications that use krb5, allows remote attackers to cause a denial of service (daemon crash) and probably execute arbitrary code via a long string in an RPC message.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:krb5-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2007-3999",
"url": "https://www.suse.com/security/cve/CVE-2007-3999"
},
{
"category": "external",
"summary": "SUSE Bug 302377 for CVE-2007-3999",
"url": "https://bugzilla.suse.com/302377"
},
{
"category": "external",
"summary": "SUSE Bug 305261 for CVE-2007-3999",
"url": "https://bugzilla.suse.com/305261"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:krb5-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2007-3999"
},
{
"cve": "CVE-2007-4000",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2007-4000"
}
],
"notes": [
{
"category": "general",
"text": "The kadm5_modify_policy_internal function in lib/kadm5/srv/svr_policy.c in the Kerberos administration daemon (kadmind) in MIT Kerberos 5 (krb5) 1.5 through 1.6.2 does not properly check return values when the policy does not exist, which might allow remote authenticated users with the \"modify policy\" privilege to execute arbitrary code via unspecified vectors that trigger a write to an uninitialized pointer.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:krb5-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2007-4000",
"url": "https://www.suse.com/security/cve/CVE-2007-4000"
},
{
"category": "external",
"summary": "SUSE Bug 302377 for CVE-2007-4000",
"url": "https://bugzilla.suse.com/302377"
},
{
"category": "external",
"summary": "SUSE Bug 305261 for CVE-2007-4000",
"url": "https://bugzilla.suse.com/305261"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:krb5-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2007-4000"
},
{
"cve": "CVE-2007-5894",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2007-5894"
}
],
"notes": [
{
"category": "general",
"text": "** DISPUTED ** The reply function in ftpd.c in the gssftp ftpd in MIT Kerberos 5 (krb5) does not initialize the length variable when auth_type has a certain value, which has unknown impact and remote authenticated attack vectors. NOTE: the original disclosure misidentifies the conditions under which the uninitialized variable is used. NOTE: the vendor disputes this issue, stating \" The \u0027length\u0027 variable is only uninitialized if \u0027auth_type\u0027 is neither the \u0027KERBEROS_V4\u0027 nor \u0027GSSAPI\u0027; this condition cannot occur in the unmodified source code.\"",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:krb5-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2007-5894",
"url": "https://www.suse.com/security/cve/CVE-2007-5894"
},
{
"category": "external",
"summary": "SUSE Bug 346745 for CVE-2007-5894",
"url": "https://bugzilla.suse.com/346745"
},
{
"category": "external",
"summary": "SUSE Bug 346749 for CVE-2007-5894",
"url": "https://bugzilla.suse.com/346749"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:krb5-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2007-5894"
},
{
"cve": "CVE-2007-5902",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2007-5902"
}
],
"notes": [
{
"category": "general",
"text": "Integer overflow in the svcauth_gss_get_principal function in lib/rpc/svc_auth_gss.c in MIT Kerberos 5 (krb5) allows remote attackers to have an unknown impact via a large length value for a GSS client name in an RPC request.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:krb5-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2007-5902",
"url": "https://www.suse.com/security/cve/CVE-2007-5902"
},
{
"category": "external",
"summary": "SUSE Bug 346747 for CVE-2007-5902",
"url": "https://bugzilla.suse.com/346747"
},
{
"category": "external",
"summary": "SUSE Bug 346749 for CVE-2007-5902",
"url": "https://bugzilla.suse.com/346749"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:krb5-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2007-5902"
},
{
"cve": "CVE-2007-5971",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2007-5971"
}
],
"notes": [
{
"category": "general",
"text": "Double free vulnerability in the gss_krb5int_make_seal_token_v3 function in lib/gssapi/krb5/k5sealv3.c in MIT Kerberos 5 (krb5) has unknown impact and attack vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:krb5-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2007-5971",
"url": "https://www.suse.com/security/cve/CVE-2007-5971"
},
{
"category": "external",
"summary": "SUSE Bug 346748 for CVE-2007-5971",
"url": "https://bugzilla.suse.com/346748"
},
{
"category": "external",
"summary": "SUSE Bug 346749 for CVE-2007-5971",
"url": "https://bugzilla.suse.com/346749"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:krb5-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2007-5971"
},
{
"cve": "CVE-2007-5972",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2007-5972"
}
],
"notes": [
{
"category": "general",
"text": "Double free vulnerability in the krb5_def_store_mkey function in lib/kdb/kdb_default.c in MIT Kerberos 5 (krb5) 1.5 has unknown impact and remote authenticated attack vectors. NOTE: the free operations occur in code that stores the krb5kdc master key, and so the attacker must have privileges to store this key.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:krb5-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2007-5972",
"url": "https://www.suse.com/security/cve/CVE-2007-5972"
},
{
"category": "external",
"summary": "SUSE Bug 346749 for CVE-2007-5972",
"url": "https://bugzilla.suse.com/346749"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:krb5-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2007-5972"
},
{
"cve": "CVE-2008-0062",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2008-0062"
}
],
"notes": [
{
"category": "general",
"text": "KDC in MIT Kerberos 5 (krb5kdc) does not set a global variable for some krb4 message types, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted messages that trigger a NULL pointer dereference or double-free.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:krb5-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2008-0062",
"url": "https://www.suse.com/security/cve/CVE-2008-0062"
},
{
"category": "external",
"summary": "SUSE Bug 361373 for CVE-2008-0062",
"url": "https://bugzilla.suse.com/361373"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:krb5-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:krb5-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2008-0062"
},
{
"cve": "CVE-2008-0947",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2008-0947"
}
],
"notes": [
{
"category": "general",
"text": "Buffer overflow in the RPC library used by libgssrpc and kadmind in MIT Kerberos 5 (krb5) 1.4 through 1.6.3 allows remote attackers to execute arbitrary code by triggering a large number of open file descriptors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:krb5-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2008-0947",
"url": "https://www.suse.com/security/cve/CVE-2008-0947"
},
{
"category": "external",
"summary": "SUSE Bug 363151 for CVE-2008-0947",
"url": "https://bugzilla.suse.com/363151"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:krb5-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2008-0947"
},
{
"cve": "CVE-2017-11368",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-11368"
}
],
"notes": [
{
"category": "general",
"text": "In MIT Kerberos 5 (aka krb5) 1.7 and later, an authenticated attacker can cause a KDC assertion failure by sending invalid S4U2Self or S4U2Proxy requests.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:krb5-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-11368",
"url": "https://www.suse.com/security/cve/CVE-2017-11368"
},
{
"category": "external",
"summary": "SUSE Bug 1049819 for CVE-2017-11368",
"url": "https://bugzilla.suse.com/1049819"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:krb5-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:krb5-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2017-11368"
},
{
"cve": "CVE-2017-11462",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-11462"
}
],
"notes": [
{
"category": "general",
"text": "Double free vulnerability in MIT Kerberos 5 (aka krb5) allows attackers to have unspecified impact via vectors involving automatic deletion of security contexts on error.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:krb5-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-11462",
"url": "https://www.suse.com/security/cve/CVE-2017-11462"
},
{
"category": "external",
"summary": "SUSE Bug 1056995 for CVE-2017-11462",
"url": "https://bugzilla.suse.com/1056995"
},
{
"category": "external",
"summary": "SUSE Bug 1122468 for CVE-2017-11462",
"url": "https://bugzilla.suse.com/1122468"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:krb5-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:krb5-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2017-11462"
},
{
"cve": "CVE-2018-5729",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-5729"
}
],
"notes": [
{
"category": "general",
"text": "MIT krb5 1.6 or later allows an authenticated kadmin with permission to add principals to an LDAP Kerberos database to cause a denial of service (NULL pointer dereference) or bypass a DN container check by supplying tagged data that is internal to the database module.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:krb5-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-5729",
"url": "https://www.suse.com/security/cve/CVE-2018-5729"
},
{
"category": "external",
"summary": "SUSE Bug 1076211 for CVE-2018-5729",
"url": "https://bugzilla.suse.com/1076211"
},
{
"category": "external",
"summary": "SUSE Bug 1083926 for CVE-2018-5729",
"url": "https://bugzilla.suse.com/1083926"
},
{
"category": "external",
"summary": "SUSE Bug 1122468 for CVE-2018-5729",
"url": "https://bugzilla.suse.com/1122468"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:krb5-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.2,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:krb5-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-5729"
},
{
"cve": "CVE-2021-36222",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-36222"
}
],
"notes": [
{
"category": "general",
"text": "ec_verify in kdc/kdc_preauth_ec.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.18.4 and 1.19.x before 1.19.2 allows remote attackers to cause a NULL pointer dereference and daemon crash. This occurs because a return value is not properly managed in a certain situation.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:krb5-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-36222",
"url": "https://www.suse.com/security/cve/CVE-2021-36222"
},
{
"category": "external",
"summary": "SUSE Bug 1188571 for CVE-2021-36222",
"url": "https://bugzilla.suse.com/1188571"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:krb5-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:krb5-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-36222"
},
{
"cve": "CVE-2021-37750",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-37750"
}
],
"notes": [
{
"category": "general",
"text": "The Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.18.5 and 1.19.x before 1.19.3 has a NULL pointer dereference in kdc/do_tgs_req.c via a FAST inner body that lacks a server field.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:krb5-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-37750",
"url": "https://www.suse.com/security/cve/CVE-2021-37750"
},
{
"category": "external",
"summary": "SUSE Bug 1189929 for CVE-2021-37750",
"url": "https://bugzilla.suse.com/1189929"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:krb5-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:krb5-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-client-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.x86_64",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.aarch64",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.ppc64le",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.s390x",
"openSUSE Tumbleweed:krb5-server-1.19.2-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-37750"
}
]
}
RHSA-2008:0164
Vulnerability from csaf_redhat - Published: 2008-03-18 19:26 - Updated: 2025-11-21 17:33Summary
Red Hat Security Advisory: krb5 security and bugfix update
Severity
Critical
Notes
Topic: Updated krb5 packages that resolve several issues and fix multiple bugs are
now available for Red Hat Enterprise Linux 5.
This update has been rated as having critical security impact by the Red
Hat Security Response Team.
Details: Kerberos is a network authentication system which allows clients and
servers to authenticate to each other through use of symmetric encryption
and a trusted third party, the KDC.
A flaw was found in the way the MIT Kerberos Authentication Service and Key
Distribution Center server (krb5kdc) handled Kerberos v4 protocol packets.
An unauthenticated remote attacker could use this flaw to crash the
krb5kdc daemon, disclose portions of its memory, or possibly execute
arbitrary code using malformed or truncated Kerberos v4 protocol requests.
(CVE-2008-0062, CVE-2008-0063)
This issue only affected krb5kdc with Kerberos v4 protocol compatibility
enabled, which is the default setting on Red Hat Enterprise Linux 4.
Kerberos v4 protocol support can be disabled by adding "v4_mode=none"
(without the quotes) to the "[kdcdefaults]" section of
/var/kerberos/krb5kdc/kdc.conf.
Jeff Altman of Secure Endpoints discovered a flaw in the RPC library as
used by MIT Kerberos kadmind server. An unauthenticated remote attacker
could use this flaw to crash kadmind or possibly execute arbitrary code.
This issue only affected systems with certain resource limits configured
and did not affect systems using default resource limits used by Red Hat
Enterprise Linux 5. (CVE-2008-0947)
Red Hat would like to thank MIT for reporting these issues.
Multiple memory management flaws were discovered in the GSSAPI library used
by MIT Kerberos. These flaws could possibly result in use of already freed
memory or an attempt to free already freed memory blocks (double-free
flaw), possibly causing a crash or arbitrary code execution.
(CVE-2007-5901, CVE-2007-5971)
In addition to the security issues resolved above, the following bugs were
also fixed:
* delegated krb5 credentials were not properly stored when SPNEGO was the
underlying mechanism during GSSAPI authentication. Consequently,
applications attempting to copy delegated Kerberos 5 credentials into a
credential cache received an "Invalid credential was supplied" message
rather than a copy of the delegated credentials. With this update, SPNEGO
credentials can be properly searched, allowing applications to copy
delegated credentials as expected.
* applications can initiate context acceptance (via gss_accept_sec_context)
without passing a ret_flags value that would indicate that credentials were
delegated. A delegated credential handle should have been returned in such
instances. This updated package adds a temp_ret_flag that stores the
credential status in the event no other ret_flags value is passed by an
application calling gss_accept_sec_context.
* kpasswd did not fallback to TCP on receipt of certain errors, or when a
packet was too big for UDP. This update corrects this.
* when the libkrb5 password-routine generated a set-password or
change-password request, incorrect sequence numbers were generated for all
requests subsequent to the first request. This caused password change
requests to fail if the primary server was unavailable. This updated
package corrects this by saving the sequence number value after the AP-REQ
data is built and restoring this value before the request is generated.
* when a user's password expired, kinit would not prompt that user to
change the password, instead simply informing the user their password had
expired. This update corrects this behavior: kinit now prompts for a new
password to be set when a password has expired.
All krb5 users are advised to upgrade to these updated packages, which
contain backported fixes to address these vulnerabilities and fix these
bugs.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
Use-after-free vulnerability in the gss_indicate_mechs function in lib/gssapi/mechglue/g_initialize.c in MIT Kerberos 5 (krb5) has unknown impact and attack vectors. NOTE: this might be the result of a typo in the source code.
CWE-416 - Use After FreeAffected products
Fixed
96 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 5Client-Workstation:krb5-0:1.6.1-17.el5_1.1.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:krb5-0:1.6.1-17.el5_1.1.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:krb5-devel-0:1.6.1-17.el5_1.1.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:krb5-devel-0:1.6.1-17.el5_1.1.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:krb5-devel-0:1.6.1-17.el5_1.1.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:krb5-devel-0:1.6.1-17.el5_1.1.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:krb5-devel-0:1.6.1-17.el5_1.1.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:krb5-devel-0:1.6.1-17.el5_1.1.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:krb5-devel-0:1.6.1-17.el5_1.1.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:krb5-libs-0:1.6.1-17.el5_1.1.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:krb5-libs-0:1.6.1-17.el5_1.1.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:krb5-libs-0:1.6.1-17.el5_1.1.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:krb5-libs-0:1.6.1-17.el5_1.1.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:krb5-libs-0:1.6.1-17.el5_1.1.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:krb5-libs-0:1.6.1-17.el5_1.1.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:krb5-libs-0:1.6.1-17.el5_1.1.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:krb5-server-0:1.6.1-17.el5_1.1.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:krb5-server-0:1.6.1-17.el5_1.1.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:krb5-server-0:1.6.1-17.el5_1.1.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:krb5-server-0:1.6.1-17.el5_1.1.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:krb5-server-0:1.6.1-17.el5_1.1.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:krb5-workstation-0:1.6.1-17.el5_1.1.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:krb5-workstation-0:1.6.1-17.el5_1.1.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:krb5-workstation-0:1.6.1-17.el5_1.1.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:krb5-workstation-0:1.6.1-17.el5_1.1.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:krb5-workstation-0:1.6.1-17.el5_1.1.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:krb5-0:1.6.1-17.el5_1.1.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:krb5-devel-0:1.6.1-17.el5_1.1.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:krb5-devel-0:1.6.1-17.el5_1.1.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:krb5-devel-0:1.6.1-17.el5_1.1.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:krb5-devel-0:1.6.1-17.el5_1.1.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:krb5-devel-0:1.6.1-17.el5_1.1.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:krb5-devel-0:1.6.1-17.el5_1.1.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:krb5-devel-0:1.6.1-17.el5_1.1.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:krb5-libs-0:1.6.1-17.el5_1.1.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:krb5-libs-0:1.6.1-17.el5_1.1.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:krb5-libs-0:1.6.1-17.el5_1.1.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:krb5-libs-0:1.6.1-17.el5_1.1.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:krb5-libs-0:1.6.1-17.el5_1.1.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:krb5-libs-0:1.6.1-17.el5_1.1.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:krb5-libs-0:1.6.1-17.el5_1.1.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:krb5-server-0:1.6.1-17.el5_1.1.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:krb5-server-0:1.6.1-17.el5_1.1.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:krb5-server-0:1.6.1-17.el5_1.1.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:krb5-server-0:1.6.1-17.el5_1.1.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:krb5-server-0:1.6.1-17.el5_1.1.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:krb5-workstation-0:1.6.1-17.el5_1.1.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:krb5-workstation-0:1.6.1-17.el5_1.1.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:krb5-workstation-0:1.6.1-17.el5_1.1.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:krb5-workstation-0:1.6.1-17.el5_1.1.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:krb5-workstation-0:1.6.1-17.el5_1.1.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Low
Double free vulnerability in the gss_krb5int_make_seal_token_v3 function in lib/gssapi/krb5/k5sealv3.c in MIT Kerberos 5 (krb5) has unknown impact and attack vectors.
Affected products
Fixed
96 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 5Client-Workstation:krb5-0:1.6.1-17.el5_1.1.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:krb5-0:1.6.1-17.el5_1.1.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:krb5-devel-0:1.6.1-17.el5_1.1.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:krb5-devel-0:1.6.1-17.el5_1.1.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:krb5-devel-0:1.6.1-17.el5_1.1.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:krb5-devel-0:1.6.1-17.el5_1.1.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:krb5-devel-0:1.6.1-17.el5_1.1.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:krb5-devel-0:1.6.1-17.el5_1.1.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:krb5-devel-0:1.6.1-17.el5_1.1.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:krb5-libs-0:1.6.1-17.el5_1.1.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:krb5-libs-0:1.6.1-17.el5_1.1.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:krb5-libs-0:1.6.1-17.el5_1.1.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:krb5-libs-0:1.6.1-17.el5_1.1.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:krb5-libs-0:1.6.1-17.el5_1.1.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:krb5-libs-0:1.6.1-17.el5_1.1.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:krb5-libs-0:1.6.1-17.el5_1.1.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:krb5-server-0:1.6.1-17.el5_1.1.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:krb5-server-0:1.6.1-17.el5_1.1.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:krb5-server-0:1.6.1-17.el5_1.1.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:krb5-server-0:1.6.1-17.el5_1.1.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:krb5-server-0:1.6.1-17.el5_1.1.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:krb5-workstation-0:1.6.1-17.el5_1.1.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:krb5-workstation-0:1.6.1-17.el5_1.1.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:krb5-workstation-0:1.6.1-17.el5_1.1.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:krb5-workstation-0:1.6.1-17.el5_1.1.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:krb5-workstation-0:1.6.1-17.el5_1.1.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:krb5-0:1.6.1-17.el5_1.1.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:krb5-devel-0:1.6.1-17.el5_1.1.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:krb5-devel-0:1.6.1-17.el5_1.1.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:krb5-devel-0:1.6.1-17.el5_1.1.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:krb5-devel-0:1.6.1-17.el5_1.1.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:krb5-devel-0:1.6.1-17.el5_1.1.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:krb5-devel-0:1.6.1-17.el5_1.1.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:krb5-devel-0:1.6.1-17.el5_1.1.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:krb5-libs-0:1.6.1-17.el5_1.1.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:krb5-libs-0:1.6.1-17.el5_1.1.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:krb5-libs-0:1.6.1-17.el5_1.1.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:krb5-libs-0:1.6.1-17.el5_1.1.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:krb5-libs-0:1.6.1-17.el5_1.1.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:krb5-libs-0:1.6.1-17.el5_1.1.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:krb5-libs-0:1.6.1-17.el5_1.1.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:krb5-server-0:1.6.1-17.el5_1.1.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:krb5-server-0:1.6.1-17.el5_1.1.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:krb5-server-0:1.6.1-17.el5_1.1.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:krb5-server-0:1.6.1-17.el5_1.1.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:krb5-server-0:1.6.1-17.el5_1.1.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:krb5-workstation-0:1.6.1-17.el5_1.1.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:krb5-workstation-0:1.6.1-17.el5_1.1.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:krb5-workstation-0:1.6.1-17.el5_1.1.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:krb5-workstation-0:1.6.1-17.el5_1.1.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:krb5-workstation-0:1.6.1-17.el5_1.1.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Low
KDC in MIT Kerberos 5 (krb5kdc) does not set a global variable for some krb4 message types, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted messages that trigger a NULL pointer dereference or double-free.
Affected products
Fixed
96 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 5Client-Workstation:krb5-0:1.6.1-17.el5_1.1.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:krb5-0:1.6.1-17.el5_1.1.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:krb5-devel-0:1.6.1-17.el5_1.1.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:krb5-devel-0:1.6.1-17.el5_1.1.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:krb5-devel-0:1.6.1-17.el5_1.1.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:krb5-devel-0:1.6.1-17.el5_1.1.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:krb5-devel-0:1.6.1-17.el5_1.1.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:krb5-devel-0:1.6.1-17.el5_1.1.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:krb5-devel-0:1.6.1-17.el5_1.1.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:krb5-libs-0:1.6.1-17.el5_1.1.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:krb5-libs-0:1.6.1-17.el5_1.1.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:krb5-libs-0:1.6.1-17.el5_1.1.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:krb5-libs-0:1.6.1-17.el5_1.1.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:krb5-libs-0:1.6.1-17.el5_1.1.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:krb5-libs-0:1.6.1-17.el5_1.1.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:krb5-libs-0:1.6.1-17.el5_1.1.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:krb5-server-0:1.6.1-17.el5_1.1.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:krb5-server-0:1.6.1-17.el5_1.1.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:krb5-server-0:1.6.1-17.el5_1.1.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:krb5-server-0:1.6.1-17.el5_1.1.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:krb5-server-0:1.6.1-17.el5_1.1.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:krb5-workstation-0:1.6.1-17.el5_1.1.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:krb5-workstation-0:1.6.1-17.el5_1.1.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:krb5-workstation-0:1.6.1-17.el5_1.1.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:krb5-workstation-0:1.6.1-17.el5_1.1.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:krb5-workstation-0:1.6.1-17.el5_1.1.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:krb5-0:1.6.1-17.el5_1.1.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:krb5-devel-0:1.6.1-17.el5_1.1.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:krb5-devel-0:1.6.1-17.el5_1.1.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:krb5-devel-0:1.6.1-17.el5_1.1.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:krb5-devel-0:1.6.1-17.el5_1.1.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:krb5-devel-0:1.6.1-17.el5_1.1.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:krb5-devel-0:1.6.1-17.el5_1.1.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:krb5-devel-0:1.6.1-17.el5_1.1.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:krb5-libs-0:1.6.1-17.el5_1.1.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:krb5-libs-0:1.6.1-17.el5_1.1.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:krb5-libs-0:1.6.1-17.el5_1.1.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:krb5-libs-0:1.6.1-17.el5_1.1.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:krb5-libs-0:1.6.1-17.el5_1.1.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:krb5-libs-0:1.6.1-17.el5_1.1.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:krb5-libs-0:1.6.1-17.el5_1.1.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:krb5-server-0:1.6.1-17.el5_1.1.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:krb5-server-0:1.6.1-17.el5_1.1.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:krb5-server-0:1.6.1-17.el5_1.1.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:krb5-server-0:1.6.1-17.el5_1.1.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:krb5-server-0:1.6.1-17.el5_1.1.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:krb5-workstation-0:1.6.1-17.el5_1.1.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:krb5-workstation-0:1.6.1-17.el5_1.1.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:krb5-workstation-0:1.6.1-17.el5_1.1.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:krb5-workstation-0:1.6.1-17.el5_1.1.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:krb5-workstation-0:1.6.1-17.el5_1.1.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Critical
The Kerberos 4 support in KDC in MIT Kerberos 5 (krb5kdc) does not properly clear the unused portion of a buffer when generating an error message, which might allow remote attackers to obtain sensitive information, aka "Uninitialized stack values."
Affected products
Fixed
96 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 5Client-Workstation:krb5-0:1.6.1-17.el5_1.1.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:krb5-0:1.6.1-17.el5_1.1.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:krb5-devel-0:1.6.1-17.el5_1.1.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:krb5-devel-0:1.6.1-17.el5_1.1.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:krb5-devel-0:1.6.1-17.el5_1.1.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:krb5-devel-0:1.6.1-17.el5_1.1.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:krb5-devel-0:1.6.1-17.el5_1.1.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:krb5-devel-0:1.6.1-17.el5_1.1.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:krb5-devel-0:1.6.1-17.el5_1.1.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:krb5-libs-0:1.6.1-17.el5_1.1.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:krb5-libs-0:1.6.1-17.el5_1.1.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:krb5-libs-0:1.6.1-17.el5_1.1.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:krb5-libs-0:1.6.1-17.el5_1.1.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:krb5-libs-0:1.6.1-17.el5_1.1.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:krb5-libs-0:1.6.1-17.el5_1.1.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:krb5-libs-0:1.6.1-17.el5_1.1.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:krb5-server-0:1.6.1-17.el5_1.1.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:krb5-server-0:1.6.1-17.el5_1.1.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:krb5-server-0:1.6.1-17.el5_1.1.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:krb5-server-0:1.6.1-17.el5_1.1.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:krb5-server-0:1.6.1-17.el5_1.1.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:krb5-workstation-0:1.6.1-17.el5_1.1.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:krb5-workstation-0:1.6.1-17.el5_1.1.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:krb5-workstation-0:1.6.1-17.el5_1.1.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:krb5-workstation-0:1.6.1-17.el5_1.1.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:krb5-workstation-0:1.6.1-17.el5_1.1.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:krb5-0:1.6.1-17.el5_1.1.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:krb5-devel-0:1.6.1-17.el5_1.1.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:krb5-devel-0:1.6.1-17.el5_1.1.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:krb5-devel-0:1.6.1-17.el5_1.1.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:krb5-devel-0:1.6.1-17.el5_1.1.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:krb5-devel-0:1.6.1-17.el5_1.1.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:krb5-devel-0:1.6.1-17.el5_1.1.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:krb5-devel-0:1.6.1-17.el5_1.1.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:krb5-libs-0:1.6.1-17.el5_1.1.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:krb5-libs-0:1.6.1-17.el5_1.1.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:krb5-libs-0:1.6.1-17.el5_1.1.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:krb5-libs-0:1.6.1-17.el5_1.1.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:krb5-libs-0:1.6.1-17.el5_1.1.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:krb5-libs-0:1.6.1-17.el5_1.1.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:krb5-libs-0:1.6.1-17.el5_1.1.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:krb5-server-0:1.6.1-17.el5_1.1.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:krb5-server-0:1.6.1-17.el5_1.1.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:krb5-server-0:1.6.1-17.el5_1.1.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:krb5-server-0:1.6.1-17.el5_1.1.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:krb5-server-0:1.6.1-17.el5_1.1.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:krb5-workstation-0:1.6.1-17.el5_1.1.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:krb5-workstation-0:1.6.1-17.el5_1.1.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:krb5-workstation-0:1.6.1-17.el5_1.1.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:krb5-workstation-0:1.6.1-17.el5_1.1.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:krb5-workstation-0:1.6.1-17.el5_1.1.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Moderate
Buffer overflow in the RPC library used by libgssrpc and kadmind in MIT Kerberos 5 (krb5) 1.4 through 1.6.3 allows remote attackers to execute arbitrary code by triggering a large number of open file descriptors.
Affected products
Fixed
96 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 5Client-Workstation:krb5-0:1.6.1-17.el5_1.1.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:krb5-0:1.6.1-17.el5_1.1.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:krb5-devel-0:1.6.1-17.el5_1.1.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:krb5-devel-0:1.6.1-17.el5_1.1.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:krb5-devel-0:1.6.1-17.el5_1.1.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:krb5-devel-0:1.6.1-17.el5_1.1.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:krb5-devel-0:1.6.1-17.el5_1.1.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:krb5-devel-0:1.6.1-17.el5_1.1.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:krb5-devel-0:1.6.1-17.el5_1.1.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:krb5-libs-0:1.6.1-17.el5_1.1.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:krb5-libs-0:1.6.1-17.el5_1.1.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:krb5-libs-0:1.6.1-17.el5_1.1.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:krb5-libs-0:1.6.1-17.el5_1.1.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:krb5-libs-0:1.6.1-17.el5_1.1.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:krb5-libs-0:1.6.1-17.el5_1.1.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:krb5-libs-0:1.6.1-17.el5_1.1.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:krb5-server-0:1.6.1-17.el5_1.1.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:krb5-server-0:1.6.1-17.el5_1.1.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:krb5-server-0:1.6.1-17.el5_1.1.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:krb5-server-0:1.6.1-17.el5_1.1.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:krb5-server-0:1.6.1-17.el5_1.1.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:krb5-workstation-0:1.6.1-17.el5_1.1.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:krb5-workstation-0:1.6.1-17.el5_1.1.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:krb5-workstation-0:1.6.1-17.el5_1.1.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:krb5-workstation-0:1.6.1-17.el5_1.1.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:krb5-workstation-0:1.6.1-17.el5_1.1.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:krb5-0:1.6.1-17.el5_1.1.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:krb5-devel-0:1.6.1-17.el5_1.1.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:krb5-devel-0:1.6.1-17.el5_1.1.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:krb5-devel-0:1.6.1-17.el5_1.1.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:krb5-devel-0:1.6.1-17.el5_1.1.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:krb5-devel-0:1.6.1-17.el5_1.1.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:krb5-devel-0:1.6.1-17.el5_1.1.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:krb5-devel-0:1.6.1-17.el5_1.1.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:krb5-libs-0:1.6.1-17.el5_1.1.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:krb5-libs-0:1.6.1-17.el5_1.1.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:krb5-libs-0:1.6.1-17.el5_1.1.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:krb5-libs-0:1.6.1-17.el5_1.1.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:krb5-libs-0:1.6.1-17.el5_1.1.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:krb5-libs-0:1.6.1-17.el5_1.1.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:krb5-libs-0:1.6.1-17.el5_1.1.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:krb5-server-0:1.6.1-17.el5_1.1.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:krb5-server-0:1.6.1-17.el5_1.1.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:krb5-server-0:1.6.1-17.el5_1.1.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:krb5-server-0:1.6.1-17.el5_1.1.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:krb5-server-0:1.6.1-17.el5_1.1.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:krb5-workstation-0:1.6.1-17.el5_1.1.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:krb5-workstation-0:1.6.1-17.el5_1.1.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:krb5-workstation-0:1.6.1-17.el5_1.1.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:krb5-workstation-0:1.6.1-17.el5_1.1.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:krb5-workstation-0:1.6.1-17.el5_1.1.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Moderate
References
33 references
Acknowledgments
MIT
Secure Endpoints
Jeff Altman
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Critical"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Updated krb5 packages that resolve several issues and fix multiple bugs are\nnow available for Red Hat Enterprise Linux 5.\n\nThis update has been rated as having critical security impact by the Red\nHat Security Response Team.",
"title": "Topic"
},
{
"category": "general",
"text": "Kerberos is a network authentication system which allows clients and\nservers to authenticate to each other through use of symmetric encryption\nand a trusted third party, the KDC.\n\nA flaw was found in the way the MIT Kerberos Authentication Service and Key\nDistribution Center server (krb5kdc) handled Kerberos v4 protocol packets.\nAn unauthenticated remote attacker could use this flaw to crash the\nkrb5kdc daemon, disclose portions of its memory, or possibly execute\narbitrary code using malformed or truncated Kerberos v4 protocol requests.\n(CVE-2008-0062, CVE-2008-0063)\n\nThis issue only affected krb5kdc with Kerberos v4 protocol compatibility\nenabled, which is the default setting on Red Hat Enterprise Linux 4.\nKerberos v4 protocol support can be disabled by adding \"v4_mode=none\"\n(without the quotes) to the \"[kdcdefaults]\" section of\n/var/kerberos/krb5kdc/kdc.conf.\n\nJeff Altman of Secure Endpoints discovered a flaw in the RPC library as\nused by MIT Kerberos kadmind server. An unauthenticated remote attacker\ncould use this flaw to crash kadmind or possibly execute arbitrary code.\nThis issue only affected systems with certain resource limits configured\nand did not affect systems using default resource limits used by Red Hat\nEnterprise Linux 5. (CVE-2008-0947)\n\nRed Hat would like to thank MIT for reporting these issues.\n\nMultiple memory management flaws were discovered in the GSSAPI library used\nby MIT Kerberos. These flaws could possibly result in use of already freed\nmemory or an attempt to free already freed memory blocks (double-free\nflaw), possibly causing a crash or arbitrary code execution.\n(CVE-2007-5901, CVE-2007-5971)\n\nIn addition to the security issues resolved above, the following bugs were\nalso fixed:\n\n* delegated krb5 credentials were not properly stored when SPNEGO was the\nunderlying mechanism during GSSAPI authentication. Consequently,\napplications attempting to copy delegated Kerberos 5 credentials into a\ncredential cache received an \"Invalid credential was supplied\" message\nrather than a copy of the delegated credentials. With this update, SPNEGO\ncredentials can be properly searched, allowing applications to copy\ndelegated credentials as expected.\n\n* applications can initiate context acceptance (via gss_accept_sec_context)\nwithout passing a ret_flags value that would indicate that credentials were\ndelegated. A delegated credential handle should have been returned in such\ninstances. This updated package adds a temp_ret_flag that stores the\ncredential status in the event no other ret_flags value is passed by an\napplication calling gss_accept_sec_context.\n\n* kpasswd did not fallback to TCP on receipt of certain errors, or when a\npacket was too big for UDP. This update corrects this.\n\n* when the libkrb5 password-routine generated a set-password or\nchange-password request, incorrect sequence numbers were generated for all\nrequests subsequent to the first request. This caused password change\nrequests to fail if the primary server was unavailable. This updated\npackage corrects this by saving the sequence number value after the AP-REQ\ndata is built and restoring this value before the request is generated.\n\n* when a user\u0027s password expired, kinit would not prompt that user to\nchange the password, instead simply informing the user their password had\nexpired. This update corrects this behavior: kinit now prompts for a new\npassword to be set when a password has expired.\n\nAll krb5 users are advised to upgrade to these updated packages, which\ncontain backported fixes to address these vulnerabilities and fix these\nbugs.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2008:0164",
"url": "https://access.redhat.com/errata/RHSA-2008:0164"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#critical",
"url": "https://access.redhat.com/security/updates/classification/#critical"
},
{
"category": "external",
"summary": "415321",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=415321"
},
{
"category": "external",
"summary": "415351",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=415351"
},
{
"category": "external",
"summary": "432620",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=432620"
},
{
"category": "external",
"summary": "432621",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=432621"
},
{
"category": "external",
"summary": "433596",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=433596"
},
{
"category": "external",
"summary": "436460",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=436460"
},
{
"category": "external",
"summary": "436465",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=436465"
},
{
"category": "external",
"summary": "436467",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=436467"
},
{
"category": "external",
"summary": "436468",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=436468"
},
{
"category": "external",
"summary": "436470",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=436470"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0164.json"
}
],
"title": "Red Hat Security Advisory: krb5 security and bugfix update",
"tracking": {
"current_release_date": "2025-11-21T17:33:00+00:00",
"generator": {
"date": "2025-11-21T17:33:00+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.12"
}
},
"id": "RHSA-2008:0164",
"initial_release_date": "2008-03-18T19:26:00+00:00",
"revision_history": [
{
"date": "2008-03-18T19:26:00+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2008-03-18T15:26:13+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-11-21T17:33:00+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Desktop (v. 5 client)",
"product": {
"name": "Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:5::client"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product": {
"name": "Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:5::client_workstation"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux (v. 5 server)",
"product": {
"name": "Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:5::server"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "krb5-0:1.6.1-17.el5_1.1.src",
"product": {
"name": "krb5-0:1.6.1-17.el5_1.1.src",
"product_id": "krb5-0:1.6.1-17.el5_1.1.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/krb5@1.6.1-17.el5_1.1?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "krb5-debuginfo-0:1.6.1-17.el5_1.1.x86_64",
"product": {
"name": "krb5-debuginfo-0:1.6.1-17.el5_1.1.x86_64",
"product_id": "krb5-debuginfo-0:1.6.1-17.el5_1.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/krb5-debuginfo@1.6.1-17.el5_1.1?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "krb5-server-0:1.6.1-17.el5_1.1.x86_64",
"product": {
"name": "krb5-server-0:1.6.1-17.el5_1.1.x86_64",
"product_id": "krb5-server-0:1.6.1-17.el5_1.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/krb5-server@1.6.1-17.el5_1.1?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "krb5-devel-0:1.6.1-17.el5_1.1.x86_64",
"product": {
"name": "krb5-devel-0:1.6.1-17.el5_1.1.x86_64",
"product_id": "krb5-devel-0:1.6.1-17.el5_1.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/krb5-devel@1.6.1-17.el5_1.1?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "krb5-libs-0:1.6.1-17.el5_1.1.x86_64",
"product": {
"name": "krb5-libs-0:1.6.1-17.el5_1.1.x86_64",
"product_id": "krb5-libs-0:1.6.1-17.el5_1.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/krb5-libs@1.6.1-17.el5_1.1?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "krb5-workstation-0:1.6.1-17.el5_1.1.x86_64",
"product": {
"name": "krb5-workstation-0:1.6.1-17.el5_1.1.x86_64",
"product_id": "krb5-workstation-0:1.6.1-17.el5_1.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/krb5-workstation@1.6.1-17.el5_1.1?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "krb5-debuginfo-0:1.6.1-17.el5_1.1.i386",
"product": {
"name": "krb5-debuginfo-0:1.6.1-17.el5_1.1.i386",
"product_id": "krb5-debuginfo-0:1.6.1-17.el5_1.1.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/krb5-debuginfo@1.6.1-17.el5_1.1?arch=i386"
}
}
},
{
"category": "product_version",
"name": "krb5-devel-0:1.6.1-17.el5_1.1.i386",
"product": {
"name": "krb5-devel-0:1.6.1-17.el5_1.1.i386",
"product_id": "krb5-devel-0:1.6.1-17.el5_1.1.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/krb5-devel@1.6.1-17.el5_1.1?arch=i386"
}
}
},
{
"category": "product_version",
"name": "krb5-server-0:1.6.1-17.el5_1.1.i386",
"product": {
"name": "krb5-server-0:1.6.1-17.el5_1.1.i386",
"product_id": "krb5-server-0:1.6.1-17.el5_1.1.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/krb5-server@1.6.1-17.el5_1.1?arch=i386"
}
}
},
{
"category": "product_version",
"name": "krb5-libs-0:1.6.1-17.el5_1.1.i386",
"product": {
"name": "krb5-libs-0:1.6.1-17.el5_1.1.i386",
"product_id": "krb5-libs-0:1.6.1-17.el5_1.1.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/krb5-libs@1.6.1-17.el5_1.1?arch=i386"
}
}
},
{
"category": "product_version",
"name": "krb5-workstation-0:1.6.1-17.el5_1.1.i386",
"product": {
"name": "krb5-workstation-0:1.6.1-17.el5_1.1.i386",
"product_id": "krb5-workstation-0:1.6.1-17.el5_1.1.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/krb5-workstation@1.6.1-17.el5_1.1?arch=i386"
}
}
}
],
"category": "architecture",
"name": "i386"
},
{
"branches": [
{
"category": "product_version",
"name": "krb5-libs-0:1.6.1-17.el5_1.1.ia64",
"product": {
"name": "krb5-libs-0:1.6.1-17.el5_1.1.ia64",
"product_id": "krb5-libs-0:1.6.1-17.el5_1.1.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/krb5-libs@1.6.1-17.el5_1.1?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "krb5-debuginfo-0:1.6.1-17.el5_1.1.ia64",
"product": {
"name": "krb5-debuginfo-0:1.6.1-17.el5_1.1.ia64",
"product_id": "krb5-debuginfo-0:1.6.1-17.el5_1.1.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/krb5-debuginfo@1.6.1-17.el5_1.1?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "krb5-server-0:1.6.1-17.el5_1.1.ia64",
"product": {
"name": "krb5-server-0:1.6.1-17.el5_1.1.ia64",
"product_id": "krb5-server-0:1.6.1-17.el5_1.1.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/krb5-server@1.6.1-17.el5_1.1?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "krb5-devel-0:1.6.1-17.el5_1.1.ia64",
"product": {
"name": "krb5-devel-0:1.6.1-17.el5_1.1.ia64",
"product_id": "krb5-devel-0:1.6.1-17.el5_1.1.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/krb5-devel@1.6.1-17.el5_1.1?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "krb5-workstation-0:1.6.1-17.el5_1.1.ia64",
"product": {
"name": "krb5-workstation-0:1.6.1-17.el5_1.1.ia64",
"product_id": "krb5-workstation-0:1.6.1-17.el5_1.1.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/krb5-workstation@1.6.1-17.el5_1.1?arch=ia64"
}
}
}
],
"category": "architecture",
"name": "ia64"
},
{
"branches": [
{
"category": "product_version",
"name": "krb5-libs-0:1.6.1-17.el5_1.1.ppc64",
"product": {
"name": "krb5-libs-0:1.6.1-17.el5_1.1.ppc64",
"product_id": "krb5-libs-0:1.6.1-17.el5_1.1.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/krb5-libs@1.6.1-17.el5_1.1?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc64",
"product": {
"name": "krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc64",
"product_id": "krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/krb5-debuginfo@1.6.1-17.el5_1.1?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "krb5-devel-0:1.6.1-17.el5_1.1.ppc64",
"product": {
"name": "krb5-devel-0:1.6.1-17.el5_1.1.ppc64",
"product_id": "krb5-devel-0:1.6.1-17.el5_1.1.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/krb5-devel@1.6.1-17.el5_1.1?arch=ppc64"
}
}
}
],
"category": "architecture",
"name": "ppc64"
},
{
"branches": [
{
"category": "product_version",
"name": "krb5-libs-0:1.6.1-17.el5_1.1.ppc",
"product": {
"name": "krb5-libs-0:1.6.1-17.el5_1.1.ppc",
"product_id": "krb5-libs-0:1.6.1-17.el5_1.1.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/krb5-libs@1.6.1-17.el5_1.1?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc",
"product": {
"name": "krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc",
"product_id": "krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/krb5-debuginfo@1.6.1-17.el5_1.1?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "krb5-server-0:1.6.1-17.el5_1.1.ppc",
"product": {
"name": "krb5-server-0:1.6.1-17.el5_1.1.ppc",
"product_id": "krb5-server-0:1.6.1-17.el5_1.1.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/krb5-server@1.6.1-17.el5_1.1?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "krb5-devel-0:1.6.1-17.el5_1.1.ppc",
"product": {
"name": "krb5-devel-0:1.6.1-17.el5_1.1.ppc",
"product_id": "krb5-devel-0:1.6.1-17.el5_1.1.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/krb5-devel@1.6.1-17.el5_1.1?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "krb5-workstation-0:1.6.1-17.el5_1.1.ppc",
"product": {
"name": "krb5-workstation-0:1.6.1-17.el5_1.1.ppc",
"product_id": "krb5-workstation-0:1.6.1-17.el5_1.1.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/krb5-workstation@1.6.1-17.el5_1.1?arch=ppc"
}
}
}
],
"category": "architecture",
"name": "ppc"
},
{
"branches": [
{
"category": "product_version",
"name": "krb5-libs-0:1.6.1-17.el5_1.1.s390x",
"product": {
"name": "krb5-libs-0:1.6.1-17.el5_1.1.s390x",
"product_id": "krb5-libs-0:1.6.1-17.el5_1.1.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/krb5-libs@1.6.1-17.el5_1.1?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "krb5-debuginfo-0:1.6.1-17.el5_1.1.s390x",
"product": {
"name": "krb5-debuginfo-0:1.6.1-17.el5_1.1.s390x",
"product_id": "krb5-debuginfo-0:1.6.1-17.el5_1.1.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/krb5-debuginfo@1.6.1-17.el5_1.1?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "krb5-server-0:1.6.1-17.el5_1.1.s390x",
"product": {
"name": "krb5-server-0:1.6.1-17.el5_1.1.s390x",
"product_id": "krb5-server-0:1.6.1-17.el5_1.1.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/krb5-server@1.6.1-17.el5_1.1?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "krb5-devel-0:1.6.1-17.el5_1.1.s390x",
"product": {
"name": "krb5-devel-0:1.6.1-17.el5_1.1.s390x",
"product_id": "krb5-devel-0:1.6.1-17.el5_1.1.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/krb5-devel@1.6.1-17.el5_1.1?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "krb5-workstation-0:1.6.1-17.el5_1.1.s390x",
"product": {
"name": "krb5-workstation-0:1.6.1-17.el5_1.1.s390x",
"product_id": "krb5-workstation-0:1.6.1-17.el5_1.1.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/krb5-workstation@1.6.1-17.el5_1.1?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "krb5-libs-0:1.6.1-17.el5_1.1.s390",
"product": {
"name": "krb5-libs-0:1.6.1-17.el5_1.1.s390",
"product_id": "krb5-libs-0:1.6.1-17.el5_1.1.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/krb5-libs@1.6.1-17.el5_1.1?arch=s390"
}
}
},
{
"category": "product_version",
"name": "krb5-debuginfo-0:1.6.1-17.el5_1.1.s390",
"product": {
"name": "krb5-debuginfo-0:1.6.1-17.el5_1.1.s390",
"product_id": "krb5-debuginfo-0:1.6.1-17.el5_1.1.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/krb5-debuginfo@1.6.1-17.el5_1.1?arch=s390"
}
}
},
{
"category": "product_version",
"name": "krb5-devel-0:1.6.1-17.el5_1.1.s390",
"product": {
"name": "krb5-devel-0:1.6.1-17.el5_1.1.s390",
"product_id": "krb5-devel-0:1.6.1-17.el5_1.1.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/krb5-devel@1.6.1-17.el5_1.1?arch=s390"
}
}
}
],
"category": "architecture",
"name": "s390"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-0:1.6.1-17.el5_1.1.src as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:krb5-0:1.6.1-17.el5_1.1.src"
},
"product_reference": "krb5-0:1.6.1-17.el5_1.1.src",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-debuginfo-0:1.6.1-17.el5_1.1.i386 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.i386"
},
"product_reference": "krb5-debuginfo-0:1.6.1-17.el5_1.1.i386",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-debuginfo-0:1.6.1-17.el5_1.1.ia64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.ia64"
},
"product_reference": "krb5-debuginfo-0:1.6.1-17.el5_1.1.ia64",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc"
},
"product_reference": "krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc64"
},
"product_reference": "krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc64",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-debuginfo-0:1.6.1-17.el5_1.1.s390 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390"
},
"product_reference": "krb5-debuginfo-0:1.6.1-17.el5_1.1.s390",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-debuginfo-0:1.6.1-17.el5_1.1.s390x as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390x"
},
"product_reference": "krb5-debuginfo-0:1.6.1-17.el5_1.1.s390x",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-debuginfo-0:1.6.1-17.el5_1.1.x86_64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.x86_64"
},
"product_reference": "krb5-debuginfo-0:1.6.1-17.el5_1.1.x86_64",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-devel-0:1.6.1-17.el5_1.1.i386 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.i386"
},
"product_reference": "krb5-devel-0:1.6.1-17.el5_1.1.i386",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-devel-0:1.6.1-17.el5_1.1.ia64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.ia64"
},
"product_reference": "krb5-devel-0:1.6.1-17.el5_1.1.ia64",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-devel-0:1.6.1-17.el5_1.1.ppc as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.ppc"
},
"product_reference": "krb5-devel-0:1.6.1-17.el5_1.1.ppc",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-devel-0:1.6.1-17.el5_1.1.ppc64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.ppc64"
},
"product_reference": "krb5-devel-0:1.6.1-17.el5_1.1.ppc64",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-devel-0:1.6.1-17.el5_1.1.s390 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.s390"
},
"product_reference": "krb5-devel-0:1.6.1-17.el5_1.1.s390",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-devel-0:1.6.1-17.el5_1.1.s390x as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.s390x"
},
"product_reference": "krb5-devel-0:1.6.1-17.el5_1.1.s390x",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-devel-0:1.6.1-17.el5_1.1.x86_64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.x86_64"
},
"product_reference": "krb5-devel-0:1.6.1-17.el5_1.1.x86_64",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-libs-0:1.6.1-17.el5_1.1.i386 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.i386"
},
"product_reference": "krb5-libs-0:1.6.1-17.el5_1.1.i386",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-libs-0:1.6.1-17.el5_1.1.ia64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.ia64"
},
"product_reference": "krb5-libs-0:1.6.1-17.el5_1.1.ia64",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-libs-0:1.6.1-17.el5_1.1.ppc as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.ppc"
},
"product_reference": "krb5-libs-0:1.6.1-17.el5_1.1.ppc",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-libs-0:1.6.1-17.el5_1.1.ppc64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.ppc64"
},
"product_reference": "krb5-libs-0:1.6.1-17.el5_1.1.ppc64",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-libs-0:1.6.1-17.el5_1.1.s390 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.s390"
},
"product_reference": "krb5-libs-0:1.6.1-17.el5_1.1.s390",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-libs-0:1.6.1-17.el5_1.1.s390x as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.s390x"
},
"product_reference": "krb5-libs-0:1.6.1-17.el5_1.1.s390x",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-libs-0:1.6.1-17.el5_1.1.x86_64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.x86_64"
},
"product_reference": "krb5-libs-0:1.6.1-17.el5_1.1.x86_64",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-server-0:1.6.1-17.el5_1.1.i386 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.i386"
},
"product_reference": "krb5-server-0:1.6.1-17.el5_1.1.i386",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-server-0:1.6.1-17.el5_1.1.ia64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.ia64"
},
"product_reference": "krb5-server-0:1.6.1-17.el5_1.1.ia64",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-server-0:1.6.1-17.el5_1.1.ppc as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.ppc"
},
"product_reference": "krb5-server-0:1.6.1-17.el5_1.1.ppc",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-server-0:1.6.1-17.el5_1.1.s390x as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.s390x"
},
"product_reference": "krb5-server-0:1.6.1-17.el5_1.1.s390x",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-server-0:1.6.1-17.el5_1.1.x86_64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.x86_64"
},
"product_reference": "krb5-server-0:1.6.1-17.el5_1.1.x86_64",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-workstation-0:1.6.1-17.el5_1.1.i386 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.i386"
},
"product_reference": "krb5-workstation-0:1.6.1-17.el5_1.1.i386",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-workstation-0:1.6.1-17.el5_1.1.ia64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.ia64"
},
"product_reference": "krb5-workstation-0:1.6.1-17.el5_1.1.ia64",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-workstation-0:1.6.1-17.el5_1.1.ppc as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.ppc"
},
"product_reference": "krb5-workstation-0:1.6.1-17.el5_1.1.ppc",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-workstation-0:1.6.1-17.el5_1.1.s390x as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.s390x"
},
"product_reference": "krb5-workstation-0:1.6.1-17.el5_1.1.s390x",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-workstation-0:1.6.1-17.el5_1.1.x86_64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.x86_64"
},
"product_reference": "krb5-workstation-0:1.6.1-17.el5_1.1.x86_64",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-0:1.6.1-17.el5_1.1.src as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:krb5-0:1.6.1-17.el5_1.1.src"
},
"product_reference": "krb5-0:1.6.1-17.el5_1.1.src",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-debuginfo-0:1.6.1-17.el5_1.1.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.i386"
},
"product_reference": "krb5-debuginfo-0:1.6.1-17.el5_1.1.i386",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-debuginfo-0:1.6.1-17.el5_1.1.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.ia64"
},
"product_reference": "krb5-debuginfo-0:1.6.1-17.el5_1.1.ia64",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc"
},
"product_reference": "krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc64"
},
"product_reference": "krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc64",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-debuginfo-0:1.6.1-17.el5_1.1.s390 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390"
},
"product_reference": "krb5-debuginfo-0:1.6.1-17.el5_1.1.s390",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-debuginfo-0:1.6.1-17.el5_1.1.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390x"
},
"product_reference": "krb5-debuginfo-0:1.6.1-17.el5_1.1.s390x",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-debuginfo-0:1.6.1-17.el5_1.1.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.x86_64"
},
"product_reference": "krb5-debuginfo-0:1.6.1-17.el5_1.1.x86_64",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-devel-0:1.6.1-17.el5_1.1.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:krb5-devel-0:1.6.1-17.el5_1.1.i386"
},
"product_reference": "krb5-devel-0:1.6.1-17.el5_1.1.i386",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-devel-0:1.6.1-17.el5_1.1.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:krb5-devel-0:1.6.1-17.el5_1.1.ia64"
},
"product_reference": "krb5-devel-0:1.6.1-17.el5_1.1.ia64",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-devel-0:1.6.1-17.el5_1.1.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:krb5-devel-0:1.6.1-17.el5_1.1.ppc"
},
"product_reference": "krb5-devel-0:1.6.1-17.el5_1.1.ppc",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-devel-0:1.6.1-17.el5_1.1.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:krb5-devel-0:1.6.1-17.el5_1.1.ppc64"
},
"product_reference": "krb5-devel-0:1.6.1-17.el5_1.1.ppc64",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-devel-0:1.6.1-17.el5_1.1.s390 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:krb5-devel-0:1.6.1-17.el5_1.1.s390"
},
"product_reference": "krb5-devel-0:1.6.1-17.el5_1.1.s390",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-devel-0:1.6.1-17.el5_1.1.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:krb5-devel-0:1.6.1-17.el5_1.1.s390x"
},
"product_reference": "krb5-devel-0:1.6.1-17.el5_1.1.s390x",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-devel-0:1.6.1-17.el5_1.1.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:krb5-devel-0:1.6.1-17.el5_1.1.x86_64"
},
"product_reference": "krb5-devel-0:1.6.1-17.el5_1.1.x86_64",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-libs-0:1.6.1-17.el5_1.1.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:krb5-libs-0:1.6.1-17.el5_1.1.i386"
},
"product_reference": "krb5-libs-0:1.6.1-17.el5_1.1.i386",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-libs-0:1.6.1-17.el5_1.1.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:krb5-libs-0:1.6.1-17.el5_1.1.ia64"
},
"product_reference": "krb5-libs-0:1.6.1-17.el5_1.1.ia64",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-libs-0:1.6.1-17.el5_1.1.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:krb5-libs-0:1.6.1-17.el5_1.1.ppc"
},
"product_reference": "krb5-libs-0:1.6.1-17.el5_1.1.ppc",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-libs-0:1.6.1-17.el5_1.1.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:krb5-libs-0:1.6.1-17.el5_1.1.ppc64"
},
"product_reference": "krb5-libs-0:1.6.1-17.el5_1.1.ppc64",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-libs-0:1.6.1-17.el5_1.1.s390 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:krb5-libs-0:1.6.1-17.el5_1.1.s390"
},
"product_reference": "krb5-libs-0:1.6.1-17.el5_1.1.s390",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-libs-0:1.6.1-17.el5_1.1.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:krb5-libs-0:1.6.1-17.el5_1.1.s390x"
},
"product_reference": "krb5-libs-0:1.6.1-17.el5_1.1.s390x",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-libs-0:1.6.1-17.el5_1.1.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:krb5-libs-0:1.6.1-17.el5_1.1.x86_64"
},
"product_reference": "krb5-libs-0:1.6.1-17.el5_1.1.x86_64",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-server-0:1.6.1-17.el5_1.1.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:krb5-server-0:1.6.1-17.el5_1.1.i386"
},
"product_reference": "krb5-server-0:1.6.1-17.el5_1.1.i386",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-server-0:1.6.1-17.el5_1.1.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:krb5-server-0:1.6.1-17.el5_1.1.ia64"
},
"product_reference": "krb5-server-0:1.6.1-17.el5_1.1.ia64",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-server-0:1.6.1-17.el5_1.1.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:krb5-server-0:1.6.1-17.el5_1.1.ppc"
},
"product_reference": "krb5-server-0:1.6.1-17.el5_1.1.ppc",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-server-0:1.6.1-17.el5_1.1.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:krb5-server-0:1.6.1-17.el5_1.1.s390x"
},
"product_reference": "krb5-server-0:1.6.1-17.el5_1.1.s390x",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-server-0:1.6.1-17.el5_1.1.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:krb5-server-0:1.6.1-17.el5_1.1.x86_64"
},
"product_reference": "krb5-server-0:1.6.1-17.el5_1.1.x86_64",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-workstation-0:1.6.1-17.el5_1.1.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:krb5-workstation-0:1.6.1-17.el5_1.1.i386"
},
"product_reference": "krb5-workstation-0:1.6.1-17.el5_1.1.i386",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-workstation-0:1.6.1-17.el5_1.1.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:krb5-workstation-0:1.6.1-17.el5_1.1.ia64"
},
"product_reference": "krb5-workstation-0:1.6.1-17.el5_1.1.ia64",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-workstation-0:1.6.1-17.el5_1.1.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:krb5-workstation-0:1.6.1-17.el5_1.1.ppc"
},
"product_reference": "krb5-workstation-0:1.6.1-17.el5_1.1.ppc",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-workstation-0:1.6.1-17.el5_1.1.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:krb5-workstation-0:1.6.1-17.el5_1.1.s390x"
},
"product_reference": "krb5-workstation-0:1.6.1-17.el5_1.1.s390x",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-workstation-0:1.6.1-17.el5_1.1.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:krb5-workstation-0:1.6.1-17.el5_1.1.x86_64"
},
"product_reference": "krb5-workstation-0:1.6.1-17.el5_1.1.x86_64",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-0:1.6.1-17.el5_1.1.src as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:krb5-0:1.6.1-17.el5_1.1.src"
},
"product_reference": "krb5-0:1.6.1-17.el5_1.1.src",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-debuginfo-0:1.6.1-17.el5_1.1.i386 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.i386"
},
"product_reference": "krb5-debuginfo-0:1.6.1-17.el5_1.1.i386",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-debuginfo-0:1.6.1-17.el5_1.1.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.ia64"
},
"product_reference": "krb5-debuginfo-0:1.6.1-17.el5_1.1.ia64",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc"
},
"product_reference": "krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc64"
},
"product_reference": "krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc64",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-debuginfo-0:1.6.1-17.el5_1.1.s390 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390"
},
"product_reference": "krb5-debuginfo-0:1.6.1-17.el5_1.1.s390",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-debuginfo-0:1.6.1-17.el5_1.1.s390x as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390x"
},
"product_reference": "krb5-debuginfo-0:1.6.1-17.el5_1.1.s390x",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-debuginfo-0:1.6.1-17.el5_1.1.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.x86_64"
},
"product_reference": "krb5-debuginfo-0:1.6.1-17.el5_1.1.x86_64",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-devel-0:1.6.1-17.el5_1.1.i386 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:krb5-devel-0:1.6.1-17.el5_1.1.i386"
},
"product_reference": "krb5-devel-0:1.6.1-17.el5_1.1.i386",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-devel-0:1.6.1-17.el5_1.1.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:krb5-devel-0:1.6.1-17.el5_1.1.ia64"
},
"product_reference": "krb5-devel-0:1.6.1-17.el5_1.1.ia64",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-devel-0:1.6.1-17.el5_1.1.ppc as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:krb5-devel-0:1.6.1-17.el5_1.1.ppc"
},
"product_reference": "krb5-devel-0:1.6.1-17.el5_1.1.ppc",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-devel-0:1.6.1-17.el5_1.1.ppc64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:krb5-devel-0:1.6.1-17.el5_1.1.ppc64"
},
"product_reference": "krb5-devel-0:1.6.1-17.el5_1.1.ppc64",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-devel-0:1.6.1-17.el5_1.1.s390 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:krb5-devel-0:1.6.1-17.el5_1.1.s390"
},
"product_reference": "krb5-devel-0:1.6.1-17.el5_1.1.s390",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-devel-0:1.6.1-17.el5_1.1.s390x as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:krb5-devel-0:1.6.1-17.el5_1.1.s390x"
},
"product_reference": "krb5-devel-0:1.6.1-17.el5_1.1.s390x",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-devel-0:1.6.1-17.el5_1.1.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:krb5-devel-0:1.6.1-17.el5_1.1.x86_64"
},
"product_reference": "krb5-devel-0:1.6.1-17.el5_1.1.x86_64",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-libs-0:1.6.1-17.el5_1.1.i386 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:krb5-libs-0:1.6.1-17.el5_1.1.i386"
},
"product_reference": "krb5-libs-0:1.6.1-17.el5_1.1.i386",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-libs-0:1.6.1-17.el5_1.1.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:krb5-libs-0:1.6.1-17.el5_1.1.ia64"
},
"product_reference": "krb5-libs-0:1.6.1-17.el5_1.1.ia64",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-libs-0:1.6.1-17.el5_1.1.ppc as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:krb5-libs-0:1.6.1-17.el5_1.1.ppc"
},
"product_reference": "krb5-libs-0:1.6.1-17.el5_1.1.ppc",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-libs-0:1.6.1-17.el5_1.1.ppc64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:krb5-libs-0:1.6.1-17.el5_1.1.ppc64"
},
"product_reference": "krb5-libs-0:1.6.1-17.el5_1.1.ppc64",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-libs-0:1.6.1-17.el5_1.1.s390 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:krb5-libs-0:1.6.1-17.el5_1.1.s390"
},
"product_reference": "krb5-libs-0:1.6.1-17.el5_1.1.s390",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-libs-0:1.6.1-17.el5_1.1.s390x as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:krb5-libs-0:1.6.1-17.el5_1.1.s390x"
},
"product_reference": "krb5-libs-0:1.6.1-17.el5_1.1.s390x",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-libs-0:1.6.1-17.el5_1.1.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:krb5-libs-0:1.6.1-17.el5_1.1.x86_64"
},
"product_reference": "krb5-libs-0:1.6.1-17.el5_1.1.x86_64",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-server-0:1.6.1-17.el5_1.1.i386 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:krb5-server-0:1.6.1-17.el5_1.1.i386"
},
"product_reference": "krb5-server-0:1.6.1-17.el5_1.1.i386",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-server-0:1.6.1-17.el5_1.1.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:krb5-server-0:1.6.1-17.el5_1.1.ia64"
},
"product_reference": "krb5-server-0:1.6.1-17.el5_1.1.ia64",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-server-0:1.6.1-17.el5_1.1.ppc as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:krb5-server-0:1.6.1-17.el5_1.1.ppc"
},
"product_reference": "krb5-server-0:1.6.1-17.el5_1.1.ppc",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-server-0:1.6.1-17.el5_1.1.s390x as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:krb5-server-0:1.6.1-17.el5_1.1.s390x"
},
"product_reference": "krb5-server-0:1.6.1-17.el5_1.1.s390x",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-server-0:1.6.1-17.el5_1.1.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:krb5-server-0:1.6.1-17.el5_1.1.x86_64"
},
"product_reference": "krb5-server-0:1.6.1-17.el5_1.1.x86_64",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-workstation-0:1.6.1-17.el5_1.1.i386 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:krb5-workstation-0:1.6.1-17.el5_1.1.i386"
},
"product_reference": "krb5-workstation-0:1.6.1-17.el5_1.1.i386",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-workstation-0:1.6.1-17.el5_1.1.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:krb5-workstation-0:1.6.1-17.el5_1.1.ia64"
},
"product_reference": "krb5-workstation-0:1.6.1-17.el5_1.1.ia64",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-workstation-0:1.6.1-17.el5_1.1.ppc as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:krb5-workstation-0:1.6.1-17.el5_1.1.ppc"
},
"product_reference": "krb5-workstation-0:1.6.1-17.el5_1.1.ppc",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-workstation-0:1.6.1-17.el5_1.1.s390x as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:krb5-workstation-0:1.6.1-17.el5_1.1.s390x"
},
"product_reference": "krb5-workstation-0:1.6.1-17.el5_1.1.s390x",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-workstation-0:1.6.1-17.el5_1.1.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:krb5-workstation-0:1.6.1-17.el5_1.1.x86_64"
},
"product_reference": "krb5-workstation-0:1.6.1-17.el5_1.1.x86_64",
"relates_to_product_reference": "5Server"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2007-5901",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"discovery_date": "2007-11-15T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "415321"
}
],
"notes": [
{
"category": "description",
"text": "Use-after-free vulnerability in the gss_indicate_mechs function in lib/gssapi/mechglue/g_initialize.c in MIT Kerberos 5 (krb5) has unknown impact and attack vectors. NOTE: this might be the result of a typo in the source code.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "krb5: use-after-free in gssapi lib",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat is aware of this issue and is tracking it via the following bug: https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=CVE-2007-5901\n\nThe Red Hat Product Security has rated this issue as having low security impact, a future update may address this flaw.",
"title": "Statement"
}
],
"product_status": {
"fixed": [
"5Client-Workstation:krb5-0:1.6.1-17.el5_1.1.src",
"5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.i386",
"5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.ia64",
"5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc",
"5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc64",
"5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390",
"5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390x",
"5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.x86_64",
"5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.i386",
"5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.ia64",
"5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.ppc",
"5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.ppc64",
"5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.s390",
"5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.s390x",
"5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.x86_64",
"5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.i386",
"5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.ia64",
"5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.ppc",
"5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.ppc64",
"5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.s390",
"5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.s390x",
"5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.x86_64",
"5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.i386",
"5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.ia64",
"5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.ppc",
"5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.s390x",
"5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.x86_64",
"5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.i386",
"5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.ia64",
"5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.ppc",
"5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.s390x",
"5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.x86_64",
"5Client:krb5-0:1.6.1-17.el5_1.1.src",
"5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.i386",
"5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.ia64",
"5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc",
"5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc64",
"5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390",
"5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390x",
"5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.x86_64",
"5Client:krb5-devel-0:1.6.1-17.el5_1.1.i386",
"5Client:krb5-devel-0:1.6.1-17.el5_1.1.ia64",
"5Client:krb5-devel-0:1.6.1-17.el5_1.1.ppc",
"5Client:krb5-devel-0:1.6.1-17.el5_1.1.ppc64",
"5Client:krb5-devel-0:1.6.1-17.el5_1.1.s390",
"5Client:krb5-devel-0:1.6.1-17.el5_1.1.s390x",
"5Client:krb5-devel-0:1.6.1-17.el5_1.1.x86_64",
"5Client:krb5-libs-0:1.6.1-17.el5_1.1.i386",
"5Client:krb5-libs-0:1.6.1-17.el5_1.1.ia64",
"5Client:krb5-libs-0:1.6.1-17.el5_1.1.ppc",
"5Client:krb5-libs-0:1.6.1-17.el5_1.1.ppc64",
"5Client:krb5-libs-0:1.6.1-17.el5_1.1.s390",
"5Client:krb5-libs-0:1.6.1-17.el5_1.1.s390x",
"5Client:krb5-libs-0:1.6.1-17.el5_1.1.x86_64",
"5Client:krb5-server-0:1.6.1-17.el5_1.1.i386",
"5Client:krb5-server-0:1.6.1-17.el5_1.1.ia64",
"5Client:krb5-server-0:1.6.1-17.el5_1.1.ppc",
"5Client:krb5-server-0:1.6.1-17.el5_1.1.s390x",
"5Client:krb5-server-0:1.6.1-17.el5_1.1.x86_64",
"5Client:krb5-workstation-0:1.6.1-17.el5_1.1.i386",
"5Client:krb5-workstation-0:1.6.1-17.el5_1.1.ia64",
"5Client:krb5-workstation-0:1.6.1-17.el5_1.1.ppc",
"5Client:krb5-workstation-0:1.6.1-17.el5_1.1.s390x",
"5Client:krb5-workstation-0:1.6.1-17.el5_1.1.x86_64",
"5Server:krb5-0:1.6.1-17.el5_1.1.src",
"5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.i386",
"5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.ia64",
"5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc",
"5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc64",
"5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390",
"5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390x",
"5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.x86_64",
"5Server:krb5-devel-0:1.6.1-17.el5_1.1.i386",
"5Server:krb5-devel-0:1.6.1-17.el5_1.1.ia64",
"5Server:krb5-devel-0:1.6.1-17.el5_1.1.ppc",
"5Server:krb5-devel-0:1.6.1-17.el5_1.1.ppc64",
"5Server:krb5-devel-0:1.6.1-17.el5_1.1.s390",
"5Server:krb5-devel-0:1.6.1-17.el5_1.1.s390x",
"5Server:krb5-devel-0:1.6.1-17.el5_1.1.x86_64",
"5Server:krb5-libs-0:1.6.1-17.el5_1.1.i386",
"5Server:krb5-libs-0:1.6.1-17.el5_1.1.ia64",
"5Server:krb5-libs-0:1.6.1-17.el5_1.1.ppc",
"5Server:krb5-libs-0:1.6.1-17.el5_1.1.ppc64",
"5Server:krb5-libs-0:1.6.1-17.el5_1.1.s390",
"5Server:krb5-libs-0:1.6.1-17.el5_1.1.s390x",
"5Server:krb5-libs-0:1.6.1-17.el5_1.1.x86_64",
"5Server:krb5-server-0:1.6.1-17.el5_1.1.i386",
"5Server:krb5-server-0:1.6.1-17.el5_1.1.ia64",
"5Server:krb5-server-0:1.6.1-17.el5_1.1.ppc",
"5Server:krb5-server-0:1.6.1-17.el5_1.1.s390x",
"5Server:krb5-server-0:1.6.1-17.el5_1.1.x86_64",
"5Server:krb5-workstation-0:1.6.1-17.el5_1.1.i386",
"5Server:krb5-workstation-0:1.6.1-17.el5_1.1.ia64",
"5Server:krb5-workstation-0:1.6.1-17.el5_1.1.ppc",
"5Server:krb5-workstation-0:1.6.1-17.el5_1.1.s390x",
"5Server:krb5-workstation-0:1.6.1-17.el5_1.1.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2007-5901"
},
{
"category": "external",
"summary": "RHBZ#415321",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=415321"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2007-5901",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-5901"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2007-5901",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2007-5901"
}
],
"release_date": "2007-11-14T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2008-03-18T19:26:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/FAQ_58_10188",
"product_ids": [
"5Client-Workstation:krb5-0:1.6.1-17.el5_1.1.src",
"5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.i386",
"5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.ia64",
"5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc",
"5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc64",
"5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390",
"5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390x",
"5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.x86_64",
"5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.i386",
"5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.ia64",
"5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.ppc",
"5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.ppc64",
"5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.s390",
"5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.s390x",
"5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.x86_64",
"5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.i386",
"5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.ia64",
"5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.ppc",
"5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.ppc64",
"5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.s390",
"5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.s390x",
"5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.x86_64",
"5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.i386",
"5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.ia64",
"5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.ppc",
"5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.s390x",
"5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.x86_64",
"5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.i386",
"5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.ia64",
"5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.ppc",
"5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.s390x",
"5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.x86_64",
"5Client:krb5-0:1.6.1-17.el5_1.1.src",
"5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.i386",
"5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.ia64",
"5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc",
"5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc64",
"5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390",
"5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390x",
"5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.x86_64",
"5Client:krb5-devel-0:1.6.1-17.el5_1.1.i386",
"5Client:krb5-devel-0:1.6.1-17.el5_1.1.ia64",
"5Client:krb5-devel-0:1.6.1-17.el5_1.1.ppc",
"5Client:krb5-devel-0:1.6.1-17.el5_1.1.ppc64",
"5Client:krb5-devel-0:1.6.1-17.el5_1.1.s390",
"5Client:krb5-devel-0:1.6.1-17.el5_1.1.s390x",
"5Client:krb5-devel-0:1.6.1-17.el5_1.1.x86_64",
"5Client:krb5-libs-0:1.6.1-17.el5_1.1.i386",
"5Client:krb5-libs-0:1.6.1-17.el5_1.1.ia64",
"5Client:krb5-libs-0:1.6.1-17.el5_1.1.ppc",
"5Client:krb5-libs-0:1.6.1-17.el5_1.1.ppc64",
"5Client:krb5-libs-0:1.6.1-17.el5_1.1.s390",
"5Client:krb5-libs-0:1.6.1-17.el5_1.1.s390x",
"5Client:krb5-libs-0:1.6.1-17.el5_1.1.x86_64",
"5Client:krb5-server-0:1.6.1-17.el5_1.1.i386",
"5Client:krb5-server-0:1.6.1-17.el5_1.1.ia64",
"5Client:krb5-server-0:1.6.1-17.el5_1.1.ppc",
"5Client:krb5-server-0:1.6.1-17.el5_1.1.s390x",
"5Client:krb5-server-0:1.6.1-17.el5_1.1.x86_64",
"5Client:krb5-workstation-0:1.6.1-17.el5_1.1.i386",
"5Client:krb5-workstation-0:1.6.1-17.el5_1.1.ia64",
"5Client:krb5-workstation-0:1.6.1-17.el5_1.1.ppc",
"5Client:krb5-workstation-0:1.6.1-17.el5_1.1.s390x",
"5Client:krb5-workstation-0:1.6.1-17.el5_1.1.x86_64",
"5Server:krb5-0:1.6.1-17.el5_1.1.src",
"5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.i386",
"5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.ia64",
"5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc",
"5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc64",
"5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390",
"5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390x",
"5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.x86_64",
"5Server:krb5-devel-0:1.6.1-17.el5_1.1.i386",
"5Server:krb5-devel-0:1.6.1-17.el5_1.1.ia64",
"5Server:krb5-devel-0:1.6.1-17.el5_1.1.ppc",
"5Server:krb5-devel-0:1.6.1-17.el5_1.1.ppc64",
"5Server:krb5-devel-0:1.6.1-17.el5_1.1.s390",
"5Server:krb5-devel-0:1.6.1-17.el5_1.1.s390x",
"5Server:krb5-devel-0:1.6.1-17.el5_1.1.x86_64",
"5Server:krb5-libs-0:1.6.1-17.el5_1.1.i386",
"5Server:krb5-libs-0:1.6.1-17.el5_1.1.ia64",
"5Server:krb5-libs-0:1.6.1-17.el5_1.1.ppc",
"5Server:krb5-libs-0:1.6.1-17.el5_1.1.ppc64",
"5Server:krb5-libs-0:1.6.1-17.el5_1.1.s390",
"5Server:krb5-libs-0:1.6.1-17.el5_1.1.s390x",
"5Server:krb5-libs-0:1.6.1-17.el5_1.1.x86_64",
"5Server:krb5-server-0:1.6.1-17.el5_1.1.i386",
"5Server:krb5-server-0:1.6.1-17.el5_1.1.ia64",
"5Server:krb5-server-0:1.6.1-17.el5_1.1.ppc",
"5Server:krb5-server-0:1.6.1-17.el5_1.1.s390x",
"5Server:krb5-server-0:1.6.1-17.el5_1.1.x86_64",
"5Server:krb5-workstation-0:1.6.1-17.el5_1.1.i386",
"5Server:krb5-workstation-0:1.6.1-17.el5_1.1.ia64",
"5Server:krb5-workstation-0:1.6.1-17.el5_1.1.ppc",
"5Server:krb5-workstation-0:1.6.1-17.el5_1.1.s390x",
"5Server:krb5-workstation-0:1.6.1-17.el5_1.1.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2008:0164"
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "krb5: use-after-free in gssapi lib"
},
{
"cve": "CVE-2007-5971",
"discovery_date": "2007-11-15T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "415351"
}
],
"notes": [
{
"category": "description",
"text": "Double free vulnerability in the gss_krb5int_make_seal_token_v3 function in lib/gssapi/krb5/k5sealv3.c in MIT Kerberos 5 (krb5) has unknown impact and attack vectors.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "krb5: double free in gssapi lib",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat is aware of this issue and is tracking it via the following bug: https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=CVE-2007-5971\n\nThe Red Hat Product Security has rated this issue as having low security impact, a future update may address this flaw. See https://marc.info/?m=119743235325151",
"title": "Statement"
}
],
"product_status": {
"fixed": [
"5Client-Workstation:krb5-0:1.6.1-17.el5_1.1.src",
"5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.i386",
"5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.ia64",
"5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc",
"5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc64",
"5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390",
"5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390x",
"5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.x86_64",
"5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.i386",
"5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.ia64",
"5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.ppc",
"5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.ppc64",
"5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.s390",
"5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.s390x",
"5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.x86_64",
"5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.i386",
"5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.ia64",
"5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.ppc",
"5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.ppc64",
"5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.s390",
"5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.s390x",
"5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.x86_64",
"5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.i386",
"5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.ia64",
"5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.ppc",
"5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.s390x",
"5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.x86_64",
"5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.i386",
"5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.ia64",
"5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.ppc",
"5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.s390x",
"5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.x86_64",
"5Client:krb5-0:1.6.1-17.el5_1.1.src",
"5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.i386",
"5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.ia64",
"5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc",
"5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc64",
"5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390",
"5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390x",
"5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.x86_64",
"5Client:krb5-devel-0:1.6.1-17.el5_1.1.i386",
"5Client:krb5-devel-0:1.6.1-17.el5_1.1.ia64",
"5Client:krb5-devel-0:1.6.1-17.el5_1.1.ppc",
"5Client:krb5-devel-0:1.6.1-17.el5_1.1.ppc64",
"5Client:krb5-devel-0:1.6.1-17.el5_1.1.s390",
"5Client:krb5-devel-0:1.6.1-17.el5_1.1.s390x",
"5Client:krb5-devel-0:1.6.1-17.el5_1.1.x86_64",
"5Client:krb5-libs-0:1.6.1-17.el5_1.1.i386",
"5Client:krb5-libs-0:1.6.1-17.el5_1.1.ia64",
"5Client:krb5-libs-0:1.6.1-17.el5_1.1.ppc",
"5Client:krb5-libs-0:1.6.1-17.el5_1.1.ppc64",
"5Client:krb5-libs-0:1.6.1-17.el5_1.1.s390",
"5Client:krb5-libs-0:1.6.1-17.el5_1.1.s390x",
"5Client:krb5-libs-0:1.6.1-17.el5_1.1.x86_64",
"5Client:krb5-server-0:1.6.1-17.el5_1.1.i386",
"5Client:krb5-server-0:1.6.1-17.el5_1.1.ia64",
"5Client:krb5-server-0:1.6.1-17.el5_1.1.ppc",
"5Client:krb5-server-0:1.6.1-17.el5_1.1.s390x",
"5Client:krb5-server-0:1.6.1-17.el5_1.1.x86_64",
"5Client:krb5-workstation-0:1.6.1-17.el5_1.1.i386",
"5Client:krb5-workstation-0:1.6.1-17.el5_1.1.ia64",
"5Client:krb5-workstation-0:1.6.1-17.el5_1.1.ppc",
"5Client:krb5-workstation-0:1.6.1-17.el5_1.1.s390x",
"5Client:krb5-workstation-0:1.6.1-17.el5_1.1.x86_64",
"5Server:krb5-0:1.6.1-17.el5_1.1.src",
"5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.i386",
"5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.ia64",
"5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc",
"5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc64",
"5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390",
"5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390x",
"5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.x86_64",
"5Server:krb5-devel-0:1.6.1-17.el5_1.1.i386",
"5Server:krb5-devel-0:1.6.1-17.el5_1.1.ia64",
"5Server:krb5-devel-0:1.6.1-17.el5_1.1.ppc",
"5Server:krb5-devel-0:1.6.1-17.el5_1.1.ppc64",
"5Server:krb5-devel-0:1.6.1-17.el5_1.1.s390",
"5Server:krb5-devel-0:1.6.1-17.el5_1.1.s390x",
"5Server:krb5-devel-0:1.6.1-17.el5_1.1.x86_64",
"5Server:krb5-libs-0:1.6.1-17.el5_1.1.i386",
"5Server:krb5-libs-0:1.6.1-17.el5_1.1.ia64",
"5Server:krb5-libs-0:1.6.1-17.el5_1.1.ppc",
"5Server:krb5-libs-0:1.6.1-17.el5_1.1.ppc64",
"5Server:krb5-libs-0:1.6.1-17.el5_1.1.s390",
"5Server:krb5-libs-0:1.6.1-17.el5_1.1.s390x",
"5Server:krb5-libs-0:1.6.1-17.el5_1.1.x86_64",
"5Server:krb5-server-0:1.6.1-17.el5_1.1.i386",
"5Server:krb5-server-0:1.6.1-17.el5_1.1.ia64",
"5Server:krb5-server-0:1.6.1-17.el5_1.1.ppc",
"5Server:krb5-server-0:1.6.1-17.el5_1.1.s390x",
"5Server:krb5-server-0:1.6.1-17.el5_1.1.x86_64",
"5Server:krb5-workstation-0:1.6.1-17.el5_1.1.i386",
"5Server:krb5-workstation-0:1.6.1-17.el5_1.1.ia64",
"5Server:krb5-workstation-0:1.6.1-17.el5_1.1.ppc",
"5Server:krb5-workstation-0:1.6.1-17.el5_1.1.s390x",
"5Server:krb5-workstation-0:1.6.1-17.el5_1.1.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2007-5971"
},
{
"category": "external",
"summary": "RHBZ#415351",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=415351"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2007-5971",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-5971"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2007-5971",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2007-5971"
}
],
"release_date": "2007-11-14T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2008-03-18T19:26:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/FAQ_58_10188",
"product_ids": [
"5Client-Workstation:krb5-0:1.6.1-17.el5_1.1.src",
"5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.i386",
"5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.ia64",
"5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc",
"5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc64",
"5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390",
"5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390x",
"5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.x86_64",
"5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.i386",
"5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.ia64",
"5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.ppc",
"5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.ppc64",
"5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.s390",
"5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.s390x",
"5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.x86_64",
"5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.i386",
"5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.ia64",
"5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.ppc",
"5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.ppc64",
"5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.s390",
"5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.s390x",
"5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.x86_64",
"5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.i386",
"5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.ia64",
"5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.ppc",
"5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.s390x",
"5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.x86_64",
"5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.i386",
"5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.ia64",
"5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.ppc",
"5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.s390x",
"5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.x86_64",
"5Client:krb5-0:1.6.1-17.el5_1.1.src",
"5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.i386",
"5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.ia64",
"5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc",
"5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc64",
"5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390",
"5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390x",
"5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.x86_64",
"5Client:krb5-devel-0:1.6.1-17.el5_1.1.i386",
"5Client:krb5-devel-0:1.6.1-17.el5_1.1.ia64",
"5Client:krb5-devel-0:1.6.1-17.el5_1.1.ppc",
"5Client:krb5-devel-0:1.6.1-17.el5_1.1.ppc64",
"5Client:krb5-devel-0:1.6.1-17.el5_1.1.s390",
"5Client:krb5-devel-0:1.6.1-17.el5_1.1.s390x",
"5Client:krb5-devel-0:1.6.1-17.el5_1.1.x86_64",
"5Client:krb5-libs-0:1.6.1-17.el5_1.1.i386",
"5Client:krb5-libs-0:1.6.1-17.el5_1.1.ia64",
"5Client:krb5-libs-0:1.6.1-17.el5_1.1.ppc",
"5Client:krb5-libs-0:1.6.1-17.el5_1.1.ppc64",
"5Client:krb5-libs-0:1.6.1-17.el5_1.1.s390",
"5Client:krb5-libs-0:1.6.1-17.el5_1.1.s390x",
"5Client:krb5-libs-0:1.6.1-17.el5_1.1.x86_64",
"5Client:krb5-server-0:1.6.1-17.el5_1.1.i386",
"5Client:krb5-server-0:1.6.1-17.el5_1.1.ia64",
"5Client:krb5-server-0:1.6.1-17.el5_1.1.ppc",
"5Client:krb5-server-0:1.6.1-17.el5_1.1.s390x",
"5Client:krb5-server-0:1.6.1-17.el5_1.1.x86_64",
"5Client:krb5-workstation-0:1.6.1-17.el5_1.1.i386",
"5Client:krb5-workstation-0:1.6.1-17.el5_1.1.ia64",
"5Client:krb5-workstation-0:1.6.1-17.el5_1.1.ppc",
"5Client:krb5-workstation-0:1.6.1-17.el5_1.1.s390x",
"5Client:krb5-workstation-0:1.6.1-17.el5_1.1.x86_64",
"5Server:krb5-0:1.6.1-17.el5_1.1.src",
"5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.i386",
"5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.ia64",
"5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc",
"5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc64",
"5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390",
"5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390x",
"5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.x86_64",
"5Server:krb5-devel-0:1.6.1-17.el5_1.1.i386",
"5Server:krb5-devel-0:1.6.1-17.el5_1.1.ia64",
"5Server:krb5-devel-0:1.6.1-17.el5_1.1.ppc",
"5Server:krb5-devel-0:1.6.1-17.el5_1.1.ppc64",
"5Server:krb5-devel-0:1.6.1-17.el5_1.1.s390",
"5Server:krb5-devel-0:1.6.1-17.el5_1.1.s390x",
"5Server:krb5-devel-0:1.6.1-17.el5_1.1.x86_64",
"5Server:krb5-libs-0:1.6.1-17.el5_1.1.i386",
"5Server:krb5-libs-0:1.6.1-17.el5_1.1.ia64",
"5Server:krb5-libs-0:1.6.1-17.el5_1.1.ppc",
"5Server:krb5-libs-0:1.6.1-17.el5_1.1.ppc64",
"5Server:krb5-libs-0:1.6.1-17.el5_1.1.s390",
"5Server:krb5-libs-0:1.6.1-17.el5_1.1.s390x",
"5Server:krb5-libs-0:1.6.1-17.el5_1.1.x86_64",
"5Server:krb5-server-0:1.6.1-17.el5_1.1.i386",
"5Server:krb5-server-0:1.6.1-17.el5_1.1.ia64",
"5Server:krb5-server-0:1.6.1-17.el5_1.1.ppc",
"5Server:krb5-server-0:1.6.1-17.el5_1.1.s390x",
"5Server:krb5-server-0:1.6.1-17.el5_1.1.x86_64",
"5Server:krb5-workstation-0:1.6.1-17.el5_1.1.i386",
"5Server:krb5-workstation-0:1.6.1-17.el5_1.1.ia64",
"5Server:krb5-workstation-0:1.6.1-17.el5_1.1.ppc",
"5Server:krb5-workstation-0:1.6.1-17.el5_1.1.s390x",
"5Server:krb5-workstation-0:1.6.1-17.el5_1.1.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2008:0164"
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "krb5: double free in gssapi lib"
},
{
"acknowledgments": [
{
"names": [
"MIT"
]
}
],
"cve": "CVE-2008-0062",
"discovery_date": "2008-02-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "432620"
}
],
"notes": [
{
"category": "description",
"text": "KDC in MIT Kerberos 5 (krb5kdc) does not set a global variable for some krb4 message types, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted messages that trigger a NULL pointer dereference or double-free.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "krb5: uninitialized pointer use in krb5kdc",
"title": "Vulnerability summary"
}
],
"product_status": {
"fixed": [
"5Client-Workstation:krb5-0:1.6.1-17.el5_1.1.src",
"5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.i386",
"5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.ia64",
"5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc",
"5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc64",
"5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390",
"5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390x",
"5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.x86_64",
"5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.i386",
"5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.ia64",
"5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.ppc",
"5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.ppc64",
"5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.s390",
"5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.s390x",
"5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.x86_64",
"5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.i386",
"5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.ia64",
"5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.ppc",
"5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.ppc64",
"5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.s390",
"5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.s390x",
"5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.x86_64",
"5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.i386",
"5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.ia64",
"5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.ppc",
"5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.s390x",
"5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.x86_64",
"5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.i386",
"5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.ia64",
"5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.ppc",
"5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.s390x",
"5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.x86_64",
"5Client:krb5-0:1.6.1-17.el5_1.1.src",
"5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.i386",
"5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.ia64",
"5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc",
"5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc64",
"5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390",
"5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390x",
"5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.x86_64",
"5Client:krb5-devel-0:1.6.1-17.el5_1.1.i386",
"5Client:krb5-devel-0:1.6.1-17.el5_1.1.ia64",
"5Client:krb5-devel-0:1.6.1-17.el5_1.1.ppc",
"5Client:krb5-devel-0:1.6.1-17.el5_1.1.ppc64",
"5Client:krb5-devel-0:1.6.1-17.el5_1.1.s390",
"5Client:krb5-devel-0:1.6.1-17.el5_1.1.s390x",
"5Client:krb5-devel-0:1.6.1-17.el5_1.1.x86_64",
"5Client:krb5-libs-0:1.6.1-17.el5_1.1.i386",
"5Client:krb5-libs-0:1.6.1-17.el5_1.1.ia64",
"5Client:krb5-libs-0:1.6.1-17.el5_1.1.ppc",
"5Client:krb5-libs-0:1.6.1-17.el5_1.1.ppc64",
"5Client:krb5-libs-0:1.6.1-17.el5_1.1.s390",
"5Client:krb5-libs-0:1.6.1-17.el5_1.1.s390x",
"5Client:krb5-libs-0:1.6.1-17.el5_1.1.x86_64",
"5Client:krb5-server-0:1.6.1-17.el5_1.1.i386",
"5Client:krb5-server-0:1.6.1-17.el5_1.1.ia64",
"5Client:krb5-server-0:1.6.1-17.el5_1.1.ppc",
"5Client:krb5-server-0:1.6.1-17.el5_1.1.s390x",
"5Client:krb5-server-0:1.6.1-17.el5_1.1.x86_64",
"5Client:krb5-workstation-0:1.6.1-17.el5_1.1.i386",
"5Client:krb5-workstation-0:1.6.1-17.el5_1.1.ia64",
"5Client:krb5-workstation-0:1.6.1-17.el5_1.1.ppc",
"5Client:krb5-workstation-0:1.6.1-17.el5_1.1.s390x",
"5Client:krb5-workstation-0:1.6.1-17.el5_1.1.x86_64",
"5Server:krb5-0:1.6.1-17.el5_1.1.src",
"5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.i386",
"5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.ia64",
"5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc",
"5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc64",
"5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390",
"5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390x",
"5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.x86_64",
"5Server:krb5-devel-0:1.6.1-17.el5_1.1.i386",
"5Server:krb5-devel-0:1.6.1-17.el5_1.1.ia64",
"5Server:krb5-devel-0:1.6.1-17.el5_1.1.ppc",
"5Server:krb5-devel-0:1.6.1-17.el5_1.1.ppc64",
"5Server:krb5-devel-0:1.6.1-17.el5_1.1.s390",
"5Server:krb5-devel-0:1.6.1-17.el5_1.1.s390x",
"5Server:krb5-devel-0:1.6.1-17.el5_1.1.x86_64",
"5Server:krb5-libs-0:1.6.1-17.el5_1.1.i386",
"5Server:krb5-libs-0:1.6.1-17.el5_1.1.ia64",
"5Server:krb5-libs-0:1.6.1-17.el5_1.1.ppc",
"5Server:krb5-libs-0:1.6.1-17.el5_1.1.ppc64",
"5Server:krb5-libs-0:1.6.1-17.el5_1.1.s390",
"5Server:krb5-libs-0:1.6.1-17.el5_1.1.s390x",
"5Server:krb5-libs-0:1.6.1-17.el5_1.1.x86_64",
"5Server:krb5-server-0:1.6.1-17.el5_1.1.i386",
"5Server:krb5-server-0:1.6.1-17.el5_1.1.ia64",
"5Server:krb5-server-0:1.6.1-17.el5_1.1.ppc",
"5Server:krb5-server-0:1.6.1-17.el5_1.1.s390x",
"5Server:krb5-server-0:1.6.1-17.el5_1.1.x86_64",
"5Server:krb5-workstation-0:1.6.1-17.el5_1.1.i386",
"5Server:krb5-workstation-0:1.6.1-17.el5_1.1.ia64",
"5Server:krb5-workstation-0:1.6.1-17.el5_1.1.ppc",
"5Server:krb5-workstation-0:1.6.1-17.el5_1.1.s390x",
"5Server:krb5-workstation-0:1.6.1-17.el5_1.1.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2008-0062"
},
{
"category": "external",
"summary": "RHBZ#432620",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=432620"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2008-0062",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-0062"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2008-0062",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2008-0062"
}
],
"release_date": "2008-03-18T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2008-03-18T19:26:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/FAQ_58_10188",
"product_ids": [
"5Client-Workstation:krb5-0:1.6.1-17.el5_1.1.src",
"5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.i386",
"5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.ia64",
"5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc",
"5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc64",
"5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390",
"5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390x",
"5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.x86_64",
"5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.i386",
"5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.ia64",
"5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.ppc",
"5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.ppc64",
"5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.s390",
"5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.s390x",
"5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.x86_64",
"5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.i386",
"5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.ia64",
"5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.ppc",
"5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.ppc64",
"5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.s390",
"5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.s390x",
"5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.x86_64",
"5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.i386",
"5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.ia64",
"5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.ppc",
"5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.s390x",
"5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.x86_64",
"5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.i386",
"5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.ia64",
"5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.ppc",
"5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.s390x",
"5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.x86_64",
"5Client:krb5-0:1.6.1-17.el5_1.1.src",
"5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.i386",
"5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.ia64",
"5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc",
"5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc64",
"5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390",
"5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390x",
"5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.x86_64",
"5Client:krb5-devel-0:1.6.1-17.el5_1.1.i386",
"5Client:krb5-devel-0:1.6.1-17.el5_1.1.ia64",
"5Client:krb5-devel-0:1.6.1-17.el5_1.1.ppc",
"5Client:krb5-devel-0:1.6.1-17.el5_1.1.ppc64",
"5Client:krb5-devel-0:1.6.1-17.el5_1.1.s390",
"5Client:krb5-devel-0:1.6.1-17.el5_1.1.s390x",
"5Client:krb5-devel-0:1.6.1-17.el5_1.1.x86_64",
"5Client:krb5-libs-0:1.6.1-17.el5_1.1.i386",
"5Client:krb5-libs-0:1.6.1-17.el5_1.1.ia64",
"5Client:krb5-libs-0:1.6.1-17.el5_1.1.ppc",
"5Client:krb5-libs-0:1.6.1-17.el5_1.1.ppc64",
"5Client:krb5-libs-0:1.6.1-17.el5_1.1.s390",
"5Client:krb5-libs-0:1.6.1-17.el5_1.1.s390x",
"5Client:krb5-libs-0:1.6.1-17.el5_1.1.x86_64",
"5Client:krb5-server-0:1.6.1-17.el5_1.1.i386",
"5Client:krb5-server-0:1.6.1-17.el5_1.1.ia64",
"5Client:krb5-server-0:1.6.1-17.el5_1.1.ppc",
"5Client:krb5-server-0:1.6.1-17.el5_1.1.s390x",
"5Client:krb5-server-0:1.6.1-17.el5_1.1.x86_64",
"5Client:krb5-workstation-0:1.6.1-17.el5_1.1.i386",
"5Client:krb5-workstation-0:1.6.1-17.el5_1.1.ia64",
"5Client:krb5-workstation-0:1.6.1-17.el5_1.1.ppc",
"5Client:krb5-workstation-0:1.6.1-17.el5_1.1.s390x",
"5Client:krb5-workstation-0:1.6.1-17.el5_1.1.x86_64",
"5Server:krb5-0:1.6.1-17.el5_1.1.src",
"5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.i386",
"5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.ia64",
"5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc",
"5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc64",
"5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390",
"5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390x",
"5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.x86_64",
"5Server:krb5-devel-0:1.6.1-17.el5_1.1.i386",
"5Server:krb5-devel-0:1.6.1-17.el5_1.1.ia64",
"5Server:krb5-devel-0:1.6.1-17.el5_1.1.ppc",
"5Server:krb5-devel-0:1.6.1-17.el5_1.1.ppc64",
"5Server:krb5-devel-0:1.6.1-17.el5_1.1.s390",
"5Server:krb5-devel-0:1.6.1-17.el5_1.1.s390x",
"5Server:krb5-devel-0:1.6.1-17.el5_1.1.x86_64",
"5Server:krb5-libs-0:1.6.1-17.el5_1.1.i386",
"5Server:krb5-libs-0:1.6.1-17.el5_1.1.ia64",
"5Server:krb5-libs-0:1.6.1-17.el5_1.1.ppc",
"5Server:krb5-libs-0:1.6.1-17.el5_1.1.ppc64",
"5Server:krb5-libs-0:1.6.1-17.el5_1.1.s390",
"5Server:krb5-libs-0:1.6.1-17.el5_1.1.s390x",
"5Server:krb5-libs-0:1.6.1-17.el5_1.1.x86_64",
"5Server:krb5-server-0:1.6.1-17.el5_1.1.i386",
"5Server:krb5-server-0:1.6.1-17.el5_1.1.ia64",
"5Server:krb5-server-0:1.6.1-17.el5_1.1.ppc",
"5Server:krb5-server-0:1.6.1-17.el5_1.1.s390x",
"5Server:krb5-server-0:1.6.1-17.el5_1.1.x86_64",
"5Server:krb5-workstation-0:1.6.1-17.el5_1.1.i386",
"5Server:krb5-workstation-0:1.6.1-17.el5_1.1.ia64",
"5Server:krb5-workstation-0:1.6.1-17.el5_1.1.ppc",
"5Server:krb5-workstation-0:1.6.1-17.el5_1.1.s390x",
"5Server:krb5-workstation-0:1.6.1-17.el5_1.1.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2008:0164"
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "krb5: uninitialized pointer use in krb5kdc"
},
{
"acknowledgments": [
{
"names": [
"MIT"
]
}
],
"cve": "CVE-2008-0063",
"discovery_date": "2008-02-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "432621"
}
],
"notes": [
{
"category": "description",
"text": "The Kerberos 4 support in KDC in MIT Kerberos 5 (krb5kdc) does not properly clear the unused portion of a buffer when generating an error message, which might allow remote attackers to obtain sensitive information, aka \"Uninitialized stack values.\"",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "krb5: possible leak of sensitive data from krb5kdc using krb4 request",
"title": "Vulnerability summary"
}
],
"product_status": {
"fixed": [
"5Client-Workstation:krb5-0:1.6.1-17.el5_1.1.src",
"5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.i386",
"5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.ia64",
"5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc",
"5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc64",
"5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390",
"5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390x",
"5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.x86_64",
"5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.i386",
"5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.ia64",
"5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.ppc",
"5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.ppc64",
"5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.s390",
"5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.s390x",
"5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.x86_64",
"5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.i386",
"5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.ia64",
"5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.ppc",
"5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.ppc64",
"5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.s390",
"5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.s390x",
"5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.x86_64",
"5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.i386",
"5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.ia64",
"5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.ppc",
"5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.s390x",
"5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.x86_64",
"5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.i386",
"5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.ia64",
"5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.ppc",
"5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.s390x",
"5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.x86_64",
"5Client:krb5-0:1.6.1-17.el5_1.1.src",
"5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.i386",
"5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.ia64",
"5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc",
"5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc64",
"5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390",
"5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390x",
"5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.x86_64",
"5Client:krb5-devel-0:1.6.1-17.el5_1.1.i386",
"5Client:krb5-devel-0:1.6.1-17.el5_1.1.ia64",
"5Client:krb5-devel-0:1.6.1-17.el5_1.1.ppc",
"5Client:krb5-devel-0:1.6.1-17.el5_1.1.ppc64",
"5Client:krb5-devel-0:1.6.1-17.el5_1.1.s390",
"5Client:krb5-devel-0:1.6.1-17.el5_1.1.s390x",
"5Client:krb5-devel-0:1.6.1-17.el5_1.1.x86_64",
"5Client:krb5-libs-0:1.6.1-17.el5_1.1.i386",
"5Client:krb5-libs-0:1.6.1-17.el5_1.1.ia64",
"5Client:krb5-libs-0:1.6.1-17.el5_1.1.ppc",
"5Client:krb5-libs-0:1.6.1-17.el5_1.1.ppc64",
"5Client:krb5-libs-0:1.6.1-17.el5_1.1.s390",
"5Client:krb5-libs-0:1.6.1-17.el5_1.1.s390x",
"5Client:krb5-libs-0:1.6.1-17.el5_1.1.x86_64",
"5Client:krb5-server-0:1.6.1-17.el5_1.1.i386",
"5Client:krb5-server-0:1.6.1-17.el5_1.1.ia64",
"5Client:krb5-server-0:1.6.1-17.el5_1.1.ppc",
"5Client:krb5-server-0:1.6.1-17.el5_1.1.s390x",
"5Client:krb5-server-0:1.6.1-17.el5_1.1.x86_64",
"5Client:krb5-workstation-0:1.6.1-17.el5_1.1.i386",
"5Client:krb5-workstation-0:1.6.1-17.el5_1.1.ia64",
"5Client:krb5-workstation-0:1.6.1-17.el5_1.1.ppc",
"5Client:krb5-workstation-0:1.6.1-17.el5_1.1.s390x",
"5Client:krb5-workstation-0:1.6.1-17.el5_1.1.x86_64",
"5Server:krb5-0:1.6.1-17.el5_1.1.src",
"5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.i386",
"5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.ia64",
"5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc",
"5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc64",
"5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390",
"5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390x",
"5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.x86_64",
"5Server:krb5-devel-0:1.6.1-17.el5_1.1.i386",
"5Server:krb5-devel-0:1.6.1-17.el5_1.1.ia64",
"5Server:krb5-devel-0:1.6.1-17.el5_1.1.ppc",
"5Server:krb5-devel-0:1.6.1-17.el5_1.1.ppc64",
"5Server:krb5-devel-0:1.6.1-17.el5_1.1.s390",
"5Server:krb5-devel-0:1.6.1-17.el5_1.1.s390x",
"5Server:krb5-devel-0:1.6.1-17.el5_1.1.x86_64",
"5Server:krb5-libs-0:1.6.1-17.el5_1.1.i386",
"5Server:krb5-libs-0:1.6.1-17.el5_1.1.ia64",
"5Server:krb5-libs-0:1.6.1-17.el5_1.1.ppc",
"5Server:krb5-libs-0:1.6.1-17.el5_1.1.ppc64",
"5Server:krb5-libs-0:1.6.1-17.el5_1.1.s390",
"5Server:krb5-libs-0:1.6.1-17.el5_1.1.s390x",
"5Server:krb5-libs-0:1.6.1-17.el5_1.1.x86_64",
"5Server:krb5-server-0:1.6.1-17.el5_1.1.i386",
"5Server:krb5-server-0:1.6.1-17.el5_1.1.ia64",
"5Server:krb5-server-0:1.6.1-17.el5_1.1.ppc",
"5Server:krb5-server-0:1.6.1-17.el5_1.1.s390x",
"5Server:krb5-server-0:1.6.1-17.el5_1.1.x86_64",
"5Server:krb5-workstation-0:1.6.1-17.el5_1.1.i386",
"5Server:krb5-workstation-0:1.6.1-17.el5_1.1.ia64",
"5Server:krb5-workstation-0:1.6.1-17.el5_1.1.ppc",
"5Server:krb5-workstation-0:1.6.1-17.el5_1.1.s390x",
"5Server:krb5-workstation-0:1.6.1-17.el5_1.1.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2008-0063"
},
{
"category": "external",
"summary": "RHBZ#432621",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=432621"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2008-0063",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-0063"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2008-0063",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2008-0063"
}
],
"release_date": "2008-03-18T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2008-03-18T19:26:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/FAQ_58_10188",
"product_ids": [
"5Client-Workstation:krb5-0:1.6.1-17.el5_1.1.src",
"5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.i386",
"5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.ia64",
"5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc",
"5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc64",
"5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390",
"5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390x",
"5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.x86_64",
"5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.i386",
"5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.ia64",
"5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.ppc",
"5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.ppc64",
"5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.s390",
"5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.s390x",
"5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.x86_64",
"5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.i386",
"5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.ia64",
"5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.ppc",
"5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.ppc64",
"5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.s390",
"5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.s390x",
"5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.x86_64",
"5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.i386",
"5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.ia64",
"5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.ppc",
"5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.s390x",
"5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.x86_64",
"5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.i386",
"5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.ia64",
"5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.ppc",
"5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.s390x",
"5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.x86_64",
"5Client:krb5-0:1.6.1-17.el5_1.1.src",
"5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.i386",
"5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.ia64",
"5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc",
"5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc64",
"5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390",
"5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390x",
"5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.x86_64",
"5Client:krb5-devel-0:1.6.1-17.el5_1.1.i386",
"5Client:krb5-devel-0:1.6.1-17.el5_1.1.ia64",
"5Client:krb5-devel-0:1.6.1-17.el5_1.1.ppc",
"5Client:krb5-devel-0:1.6.1-17.el5_1.1.ppc64",
"5Client:krb5-devel-0:1.6.1-17.el5_1.1.s390",
"5Client:krb5-devel-0:1.6.1-17.el5_1.1.s390x",
"5Client:krb5-devel-0:1.6.1-17.el5_1.1.x86_64",
"5Client:krb5-libs-0:1.6.1-17.el5_1.1.i386",
"5Client:krb5-libs-0:1.6.1-17.el5_1.1.ia64",
"5Client:krb5-libs-0:1.6.1-17.el5_1.1.ppc",
"5Client:krb5-libs-0:1.6.1-17.el5_1.1.ppc64",
"5Client:krb5-libs-0:1.6.1-17.el5_1.1.s390",
"5Client:krb5-libs-0:1.6.1-17.el5_1.1.s390x",
"5Client:krb5-libs-0:1.6.1-17.el5_1.1.x86_64",
"5Client:krb5-server-0:1.6.1-17.el5_1.1.i386",
"5Client:krb5-server-0:1.6.1-17.el5_1.1.ia64",
"5Client:krb5-server-0:1.6.1-17.el5_1.1.ppc",
"5Client:krb5-server-0:1.6.1-17.el5_1.1.s390x",
"5Client:krb5-server-0:1.6.1-17.el5_1.1.x86_64",
"5Client:krb5-workstation-0:1.6.1-17.el5_1.1.i386",
"5Client:krb5-workstation-0:1.6.1-17.el5_1.1.ia64",
"5Client:krb5-workstation-0:1.6.1-17.el5_1.1.ppc",
"5Client:krb5-workstation-0:1.6.1-17.el5_1.1.s390x",
"5Client:krb5-workstation-0:1.6.1-17.el5_1.1.x86_64",
"5Server:krb5-0:1.6.1-17.el5_1.1.src",
"5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.i386",
"5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.ia64",
"5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc",
"5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc64",
"5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390",
"5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390x",
"5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.x86_64",
"5Server:krb5-devel-0:1.6.1-17.el5_1.1.i386",
"5Server:krb5-devel-0:1.6.1-17.el5_1.1.ia64",
"5Server:krb5-devel-0:1.6.1-17.el5_1.1.ppc",
"5Server:krb5-devel-0:1.6.1-17.el5_1.1.ppc64",
"5Server:krb5-devel-0:1.6.1-17.el5_1.1.s390",
"5Server:krb5-devel-0:1.6.1-17.el5_1.1.s390x",
"5Server:krb5-devel-0:1.6.1-17.el5_1.1.x86_64",
"5Server:krb5-libs-0:1.6.1-17.el5_1.1.i386",
"5Server:krb5-libs-0:1.6.1-17.el5_1.1.ia64",
"5Server:krb5-libs-0:1.6.1-17.el5_1.1.ppc",
"5Server:krb5-libs-0:1.6.1-17.el5_1.1.ppc64",
"5Server:krb5-libs-0:1.6.1-17.el5_1.1.s390",
"5Server:krb5-libs-0:1.6.1-17.el5_1.1.s390x",
"5Server:krb5-libs-0:1.6.1-17.el5_1.1.x86_64",
"5Server:krb5-server-0:1.6.1-17.el5_1.1.i386",
"5Server:krb5-server-0:1.6.1-17.el5_1.1.ia64",
"5Server:krb5-server-0:1.6.1-17.el5_1.1.ppc",
"5Server:krb5-server-0:1.6.1-17.el5_1.1.s390x",
"5Server:krb5-server-0:1.6.1-17.el5_1.1.x86_64",
"5Server:krb5-workstation-0:1.6.1-17.el5_1.1.i386",
"5Server:krb5-workstation-0:1.6.1-17.el5_1.1.ia64",
"5Server:krb5-workstation-0:1.6.1-17.el5_1.1.ppc",
"5Server:krb5-workstation-0:1.6.1-17.el5_1.1.s390x",
"5Server:krb5-workstation-0:1.6.1-17.el5_1.1.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2008:0164"
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "krb5: possible leak of sensitive data from krb5kdc using krb4 request"
},
{
"acknowledgments": [
{
"names": [
"MIT"
]
},
{
"names": [
"Jeff Altman"
],
"organization": "Secure Endpoints"
}
],
"cve": "CVE-2008-0947",
"discovery_date": "2008-02-19T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "433596"
}
],
"notes": [
{
"category": "description",
"text": "Buffer overflow in the RPC library used by libgssrpc and kadmind in MIT Kerberos 5 (krb5) 1.4 through 1.6.3 allows remote attackers to execute arbitrary code by triggering a large number of open file descriptors.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "krb5: file descriptor array overflow in RPC library",
"title": "Vulnerability summary"
}
],
"product_status": {
"fixed": [
"5Client-Workstation:krb5-0:1.6.1-17.el5_1.1.src",
"5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.i386",
"5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.ia64",
"5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc",
"5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc64",
"5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390",
"5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390x",
"5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.x86_64",
"5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.i386",
"5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.ia64",
"5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.ppc",
"5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.ppc64",
"5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.s390",
"5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.s390x",
"5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.x86_64",
"5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.i386",
"5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.ia64",
"5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.ppc",
"5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.ppc64",
"5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.s390",
"5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.s390x",
"5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.x86_64",
"5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.i386",
"5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.ia64",
"5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.ppc",
"5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.s390x",
"5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.x86_64",
"5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.i386",
"5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.ia64",
"5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.ppc",
"5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.s390x",
"5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.x86_64",
"5Client:krb5-0:1.6.1-17.el5_1.1.src",
"5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.i386",
"5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.ia64",
"5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc",
"5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc64",
"5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390",
"5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390x",
"5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.x86_64",
"5Client:krb5-devel-0:1.6.1-17.el5_1.1.i386",
"5Client:krb5-devel-0:1.6.1-17.el5_1.1.ia64",
"5Client:krb5-devel-0:1.6.1-17.el5_1.1.ppc",
"5Client:krb5-devel-0:1.6.1-17.el5_1.1.ppc64",
"5Client:krb5-devel-0:1.6.1-17.el5_1.1.s390",
"5Client:krb5-devel-0:1.6.1-17.el5_1.1.s390x",
"5Client:krb5-devel-0:1.6.1-17.el5_1.1.x86_64",
"5Client:krb5-libs-0:1.6.1-17.el5_1.1.i386",
"5Client:krb5-libs-0:1.6.1-17.el5_1.1.ia64",
"5Client:krb5-libs-0:1.6.1-17.el5_1.1.ppc",
"5Client:krb5-libs-0:1.6.1-17.el5_1.1.ppc64",
"5Client:krb5-libs-0:1.6.1-17.el5_1.1.s390",
"5Client:krb5-libs-0:1.6.1-17.el5_1.1.s390x",
"5Client:krb5-libs-0:1.6.1-17.el5_1.1.x86_64",
"5Client:krb5-server-0:1.6.1-17.el5_1.1.i386",
"5Client:krb5-server-0:1.6.1-17.el5_1.1.ia64",
"5Client:krb5-server-0:1.6.1-17.el5_1.1.ppc",
"5Client:krb5-server-0:1.6.1-17.el5_1.1.s390x",
"5Client:krb5-server-0:1.6.1-17.el5_1.1.x86_64",
"5Client:krb5-workstation-0:1.6.1-17.el5_1.1.i386",
"5Client:krb5-workstation-0:1.6.1-17.el5_1.1.ia64",
"5Client:krb5-workstation-0:1.6.1-17.el5_1.1.ppc",
"5Client:krb5-workstation-0:1.6.1-17.el5_1.1.s390x",
"5Client:krb5-workstation-0:1.6.1-17.el5_1.1.x86_64",
"5Server:krb5-0:1.6.1-17.el5_1.1.src",
"5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.i386",
"5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.ia64",
"5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc",
"5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc64",
"5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390",
"5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390x",
"5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.x86_64",
"5Server:krb5-devel-0:1.6.1-17.el5_1.1.i386",
"5Server:krb5-devel-0:1.6.1-17.el5_1.1.ia64",
"5Server:krb5-devel-0:1.6.1-17.el5_1.1.ppc",
"5Server:krb5-devel-0:1.6.1-17.el5_1.1.ppc64",
"5Server:krb5-devel-0:1.6.1-17.el5_1.1.s390",
"5Server:krb5-devel-0:1.6.1-17.el5_1.1.s390x",
"5Server:krb5-devel-0:1.6.1-17.el5_1.1.x86_64",
"5Server:krb5-libs-0:1.6.1-17.el5_1.1.i386",
"5Server:krb5-libs-0:1.6.1-17.el5_1.1.ia64",
"5Server:krb5-libs-0:1.6.1-17.el5_1.1.ppc",
"5Server:krb5-libs-0:1.6.1-17.el5_1.1.ppc64",
"5Server:krb5-libs-0:1.6.1-17.el5_1.1.s390",
"5Server:krb5-libs-0:1.6.1-17.el5_1.1.s390x",
"5Server:krb5-libs-0:1.6.1-17.el5_1.1.x86_64",
"5Server:krb5-server-0:1.6.1-17.el5_1.1.i386",
"5Server:krb5-server-0:1.6.1-17.el5_1.1.ia64",
"5Server:krb5-server-0:1.6.1-17.el5_1.1.ppc",
"5Server:krb5-server-0:1.6.1-17.el5_1.1.s390x",
"5Server:krb5-server-0:1.6.1-17.el5_1.1.x86_64",
"5Server:krb5-workstation-0:1.6.1-17.el5_1.1.i386",
"5Server:krb5-workstation-0:1.6.1-17.el5_1.1.ia64",
"5Server:krb5-workstation-0:1.6.1-17.el5_1.1.ppc",
"5Server:krb5-workstation-0:1.6.1-17.el5_1.1.s390x",
"5Server:krb5-workstation-0:1.6.1-17.el5_1.1.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2008-0947"
},
{
"category": "external",
"summary": "RHBZ#433596",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=433596"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2008-0947",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-0947"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2008-0947",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2008-0947"
}
],
"release_date": "2008-03-18T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2008-03-18T19:26:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/FAQ_58_10188",
"product_ids": [
"5Client-Workstation:krb5-0:1.6.1-17.el5_1.1.src",
"5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.i386",
"5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.ia64",
"5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc",
"5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc64",
"5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390",
"5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390x",
"5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.x86_64",
"5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.i386",
"5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.ia64",
"5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.ppc",
"5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.ppc64",
"5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.s390",
"5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.s390x",
"5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.x86_64",
"5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.i386",
"5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.ia64",
"5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.ppc",
"5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.ppc64",
"5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.s390",
"5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.s390x",
"5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.x86_64",
"5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.i386",
"5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.ia64",
"5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.ppc",
"5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.s390x",
"5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.x86_64",
"5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.i386",
"5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.ia64",
"5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.ppc",
"5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.s390x",
"5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.x86_64",
"5Client:krb5-0:1.6.1-17.el5_1.1.src",
"5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.i386",
"5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.ia64",
"5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc",
"5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc64",
"5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390",
"5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390x",
"5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.x86_64",
"5Client:krb5-devel-0:1.6.1-17.el5_1.1.i386",
"5Client:krb5-devel-0:1.6.1-17.el5_1.1.ia64",
"5Client:krb5-devel-0:1.6.1-17.el5_1.1.ppc",
"5Client:krb5-devel-0:1.6.1-17.el5_1.1.ppc64",
"5Client:krb5-devel-0:1.6.1-17.el5_1.1.s390",
"5Client:krb5-devel-0:1.6.1-17.el5_1.1.s390x",
"5Client:krb5-devel-0:1.6.1-17.el5_1.1.x86_64",
"5Client:krb5-libs-0:1.6.1-17.el5_1.1.i386",
"5Client:krb5-libs-0:1.6.1-17.el5_1.1.ia64",
"5Client:krb5-libs-0:1.6.1-17.el5_1.1.ppc",
"5Client:krb5-libs-0:1.6.1-17.el5_1.1.ppc64",
"5Client:krb5-libs-0:1.6.1-17.el5_1.1.s390",
"5Client:krb5-libs-0:1.6.1-17.el5_1.1.s390x",
"5Client:krb5-libs-0:1.6.1-17.el5_1.1.x86_64",
"5Client:krb5-server-0:1.6.1-17.el5_1.1.i386",
"5Client:krb5-server-0:1.6.1-17.el5_1.1.ia64",
"5Client:krb5-server-0:1.6.1-17.el5_1.1.ppc",
"5Client:krb5-server-0:1.6.1-17.el5_1.1.s390x",
"5Client:krb5-server-0:1.6.1-17.el5_1.1.x86_64",
"5Client:krb5-workstation-0:1.6.1-17.el5_1.1.i386",
"5Client:krb5-workstation-0:1.6.1-17.el5_1.1.ia64",
"5Client:krb5-workstation-0:1.6.1-17.el5_1.1.ppc",
"5Client:krb5-workstation-0:1.6.1-17.el5_1.1.s390x",
"5Client:krb5-workstation-0:1.6.1-17.el5_1.1.x86_64",
"5Server:krb5-0:1.6.1-17.el5_1.1.src",
"5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.i386",
"5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.ia64",
"5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc",
"5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc64",
"5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390",
"5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390x",
"5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.x86_64",
"5Server:krb5-devel-0:1.6.1-17.el5_1.1.i386",
"5Server:krb5-devel-0:1.6.1-17.el5_1.1.ia64",
"5Server:krb5-devel-0:1.6.1-17.el5_1.1.ppc",
"5Server:krb5-devel-0:1.6.1-17.el5_1.1.ppc64",
"5Server:krb5-devel-0:1.6.1-17.el5_1.1.s390",
"5Server:krb5-devel-0:1.6.1-17.el5_1.1.s390x",
"5Server:krb5-devel-0:1.6.1-17.el5_1.1.x86_64",
"5Server:krb5-libs-0:1.6.1-17.el5_1.1.i386",
"5Server:krb5-libs-0:1.6.1-17.el5_1.1.ia64",
"5Server:krb5-libs-0:1.6.1-17.el5_1.1.ppc",
"5Server:krb5-libs-0:1.6.1-17.el5_1.1.ppc64",
"5Server:krb5-libs-0:1.6.1-17.el5_1.1.s390",
"5Server:krb5-libs-0:1.6.1-17.el5_1.1.s390x",
"5Server:krb5-libs-0:1.6.1-17.el5_1.1.x86_64",
"5Server:krb5-server-0:1.6.1-17.el5_1.1.i386",
"5Server:krb5-server-0:1.6.1-17.el5_1.1.ia64",
"5Server:krb5-server-0:1.6.1-17.el5_1.1.ppc",
"5Server:krb5-server-0:1.6.1-17.el5_1.1.s390x",
"5Server:krb5-server-0:1.6.1-17.el5_1.1.x86_64",
"5Server:krb5-workstation-0:1.6.1-17.el5_1.1.i386",
"5Server:krb5-workstation-0:1.6.1-17.el5_1.1.ia64",
"5Server:krb5-workstation-0:1.6.1-17.el5_1.1.ppc",
"5Server:krb5-workstation-0:1.6.1-17.el5_1.1.s390x",
"5Server:krb5-workstation-0:1.6.1-17.el5_1.1.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2008:0164"
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "krb5: file descriptor array overflow in RPC library"
}
]
}
RHSA-2008:0180
Vulnerability from csaf_redhat - Published: 2008-03-18 18:35 - Updated: 2025-11-21 17:33Summary
Red Hat Security Advisory: krb5 security update
Severity
Critical
Notes
Topic: Updated krb5 packages that fix multiple security issues are now available
for Red Hat Enterprise Linux 4.
This update has been rated as having critical security impact by the Red
Hat Security Response Team.
Details: Kerberos is a network authentication system which allows clients and
servers to authenticate to each other through use of symmetric encryption
and a trusted third party, the KDC.
A flaw was found in the way the MIT Kerberos Authentication Service and Key
Distribution Center server (krb5kdc) handled Kerberos v4 protocol packets.
An unauthenticated remote attacker could use this flaw to crash the
krb5kdc daemon, disclose portions of its memory, or possibly execute
arbitrary code using malformed or truncated Kerberos v4 protocol
requests. (CVE-2008-0062, CVE-2008-0063)
This issue only affected krb5kdc with Kerberos v4 protocol compatibility
enabled, which is the default setting on Red Hat Enterprise Linux 4.
Kerberos v4 protocol support can be disabled by adding "v4_mode=none"
(without the quotes) to the "[kdcdefaults]" section of
/var/kerberos/krb5kdc/kdc.conf.
Red Hat would like to thank MIT for reporting these issues.
A double-free flaw was discovered in the GSSAPI library used by MIT
Kerberos. This flaw could possibly cause a crash of the application using
the GSSAPI library. (CVE-2007-5971)
All krb5 users are advised to update to these erratum packages which
contain backported fixes to correct these issues.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
Double free vulnerability in the gss_krb5int_make_seal_token_v3 function in lib/gssapi/krb5/k5sealv3.c in MIT Kerberos 5 (krb5) has unknown impact and attack vectors.
Affected products
Fixed
132 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 4AS:krb5-0:1.3.4-54.el4_6.1.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS:krb5-debuginfo-0:1.3.4-54.el4_6.1.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS:krb5-debuginfo-0:1.3.4-54.el4_6.1.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS:krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS:krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS:krb5-debuginfo-0:1.3.4-54.el4_6.1.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS:krb5-debuginfo-0:1.3.4-54.el4_6.1.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS:krb5-debuginfo-0:1.3.4-54.el4_6.1.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS:krb5-devel-0:1.3.4-54.el4_6.1.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS:krb5-devel-0:1.3.4-54.el4_6.1.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS:krb5-devel-0:1.3.4-54.el4_6.1.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS:krb5-devel-0:1.3.4-54.el4_6.1.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS:krb5-devel-0:1.3.4-54.el4_6.1.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS:krb5-devel-0:1.3.4-54.el4_6.1.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS:krb5-libs-0:1.3.4-54.el4_6.1.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS:krb5-libs-0:1.3.4-54.el4_6.1.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS:krb5-libs-0:1.3.4-54.el4_6.1.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS:krb5-libs-0:1.3.4-54.el4_6.1.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS:krb5-libs-0:1.3.4-54.el4_6.1.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS:krb5-libs-0:1.3.4-54.el4_6.1.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS:krb5-libs-0:1.3.4-54.el4_6.1.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS:krb5-server-0:1.3.4-54.el4_6.1.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS:krb5-server-0:1.3.4-54.el4_6.1.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS:krb5-server-0:1.3.4-54.el4_6.1.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS:krb5-server-0:1.3.4-54.el4_6.1.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS:krb5-server-0:1.3.4-54.el4_6.1.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS:krb5-server-0:1.3.4-54.el4_6.1.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS:krb5-workstation-0:1.3.4-54.el4_6.1.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS:krb5-workstation-0:1.3.4-54.el4_6.1.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS:krb5-workstation-0:1.3.4-54.el4_6.1.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS:krb5-workstation-0:1.3.4-54.el4_6.1.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS:krb5-workstation-0:1.3.4-54.el4_6.1.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS:krb5-workstation-0:1.3.4-54.el4_6.1.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4Desktop:krb5-0:1.3.4-54.el4_6.1.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4Desktop:krb5-debuginfo-0:1.3.4-54.el4_6.1.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4Desktop:krb5-debuginfo-0:1.3.4-54.el4_6.1.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4Desktop:krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4Desktop:krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4Desktop:krb5-debuginfo-0:1.3.4-54.el4_6.1.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4Desktop:krb5-debuginfo-0:1.3.4-54.el4_6.1.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4Desktop:krb5-debuginfo-0:1.3.4-54.el4_6.1.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4Desktop:krb5-devel-0:1.3.4-54.el4_6.1.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4Desktop:krb5-devel-0:1.3.4-54.el4_6.1.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4Desktop:krb5-devel-0:1.3.4-54.el4_6.1.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4Desktop:krb5-devel-0:1.3.4-54.el4_6.1.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4Desktop:krb5-devel-0:1.3.4-54.el4_6.1.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4Desktop:krb5-devel-0:1.3.4-54.el4_6.1.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4Desktop:krb5-libs-0:1.3.4-54.el4_6.1.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4Desktop:krb5-libs-0:1.3.4-54.el4_6.1.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4Desktop:krb5-libs-0:1.3.4-54.el4_6.1.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4Desktop:krb5-libs-0:1.3.4-54.el4_6.1.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4Desktop:krb5-libs-0:1.3.4-54.el4_6.1.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4Desktop:krb5-libs-0:1.3.4-54.el4_6.1.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4Desktop:krb5-libs-0:1.3.4-54.el4_6.1.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4Desktop:krb5-server-0:1.3.4-54.el4_6.1.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4Desktop:krb5-server-0:1.3.4-54.el4_6.1.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4Desktop:krb5-server-0:1.3.4-54.el4_6.1.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4Desktop:krb5-server-0:1.3.4-54.el4_6.1.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4Desktop:krb5-server-0:1.3.4-54.el4_6.1.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4Desktop:krb5-server-0:1.3.4-54.el4_6.1.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4Desktop:krb5-workstation-0:1.3.4-54.el4_6.1.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4Desktop:krb5-workstation-0:1.3.4-54.el4_6.1.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4Desktop:krb5-workstation-0:1.3.4-54.el4_6.1.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4Desktop:krb5-workstation-0:1.3.4-54.el4_6.1.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4Desktop:krb5-workstation-0:1.3.4-54.el4_6.1.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4Desktop:krb5-workstation-0:1.3.4-54.el4_6.1.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES:krb5-0:1.3.4-54.el4_6.1.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES:krb5-debuginfo-0:1.3.4-54.el4_6.1.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES:krb5-debuginfo-0:1.3.4-54.el4_6.1.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES:krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES:krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES:krb5-debuginfo-0:1.3.4-54.el4_6.1.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES:krb5-debuginfo-0:1.3.4-54.el4_6.1.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES:krb5-debuginfo-0:1.3.4-54.el4_6.1.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES:krb5-devel-0:1.3.4-54.el4_6.1.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES:krb5-devel-0:1.3.4-54.el4_6.1.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES:krb5-devel-0:1.3.4-54.el4_6.1.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES:krb5-devel-0:1.3.4-54.el4_6.1.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES:krb5-devel-0:1.3.4-54.el4_6.1.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES:krb5-devel-0:1.3.4-54.el4_6.1.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES:krb5-libs-0:1.3.4-54.el4_6.1.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES:krb5-libs-0:1.3.4-54.el4_6.1.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES:krb5-libs-0:1.3.4-54.el4_6.1.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES:krb5-libs-0:1.3.4-54.el4_6.1.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES:krb5-libs-0:1.3.4-54.el4_6.1.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES:krb5-libs-0:1.3.4-54.el4_6.1.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES:krb5-libs-0:1.3.4-54.el4_6.1.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES:krb5-server-0:1.3.4-54.el4_6.1.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES:krb5-server-0:1.3.4-54.el4_6.1.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES:krb5-server-0:1.3.4-54.el4_6.1.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES:krb5-server-0:1.3.4-54.el4_6.1.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES:krb5-server-0:1.3.4-54.el4_6.1.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES:krb5-server-0:1.3.4-54.el4_6.1.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES:krb5-workstation-0:1.3.4-54.el4_6.1.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES:krb5-workstation-0:1.3.4-54.el4_6.1.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES:krb5-workstation-0:1.3.4-54.el4_6.1.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES:krb5-workstation-0:1.3.4-54.el4_6.1.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES:krb5-workstation-0:1.3.4-54.el4_6.1.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES:krb5-workstation-0:1.3.4-54.el4_6.1.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS:krb5-0:1.3.4-54.el4_6.1.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS:krb5-debuginfo-0:1.3.4-54.el4_6.1.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS:krb5-debuginfo-0:1.3.4-54.el4_6.1.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS:krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS:krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS:krb5-debuginfo-0:1.3.4-54.el4_6.1.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS:krb5-debuginfo-0:1.3.4-54.el4_6.1.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS:krb5-debuginfo-0:1.3.4-54.el4_6.1.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS:krb5-devel-0:1.3.4-54.el4_6.1.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS:krb5-devel-0:1.3.4-54.el4_6.1.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS:krb5-devel-0:1.3.4-54.el4_6.1.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS:krb5-devel-0:1.3.4-54.el4_6.1.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS:krb5-devel-0:1.3.4-54.el4_6.1.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS:krb5-devel-0:1.3.4-54.el4_6.1.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS:krb5-libs-0:1.3.4-54.el4_6.1.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS:krb5-libs-0:1.3.4-54.el4_6.1.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS:krb5-libs-0:1.3.4-54.el4_6.1.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS:krb5-libs-0:1.3.4-54.el4_6.1.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS:krb5-libs-0:1.3.4-54.el4_6.1.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS:krb5-libs-0:1.3.4-54.el4_6.1.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS:krb5-libs-0:1.3.4-54.el4_6.1.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS:krb5-server-0:1.3.4-54.el4_6.1.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS:krb5-server-0:1.3.4-54.el4_6.1.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS:krb5-server-0:1.3.4-54.el4_6.1.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS:krb5-server-0:1.3.4-54.el4_6.1.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS:krb5-server-0:1.3.4-54.el4_6.1.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS:krb5-server-0:1.3.4-54.el4_6.1.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS:krb5-workstation-0:1.3.4-54.el4_6.1.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS:krb5-workstation-0:1.3.4-54.el4_6.1.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS:krb5-workstation-0:1.3.4-54.el4_6.1.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS:krb5-workstation-0:1.3.4-54.el4_6.1.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS:krb5-workstation-0:1.3.4-54.el4_6.1.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS:krb5-workstation-0:1.3.4-54.el4_6.1.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Low
KDC in MIT Kerberos 5 (krb5kdc) does not set a global variable for some krb4 message types, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted messages that trigger a NULL pointer dereference or double-free.
Affected products
Fixed
132 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 4AS:krb5-0:1.3.4-54.el4_6.1.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS:krb5-debuginfo-0:1.3.4-54.el4_6.1.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS:krb5-debuginfo-0:1.3.4-54.el4_6.1.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS:krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS:krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS:krb5-debuginfo-0:1.3.4-54.el4_6.1.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS:krb5-debuginfo-0:1.3.4-54.el4_6.1.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS:krb5-debuginfo-0:1.3.4-54.el4_6.1.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS:krb5-devel-0:1.3.4-54.el4_6.1.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS:krb5-devel-0:1.3.4-54.el4_6.1.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS:krb5-devel-0:1.3.4-54.el4_6.1.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS:krb5-devel-0:1.3.4-54.el4_6.1.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS:krb5-devel-0:1.3.4-54.el4_6.1.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS:krb5-devel-0:1.3.4-54.el4_6.1.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS:krb5-libs-0:1.3.4-54.el4_6.1.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS:krb5-libs-0:1.3.4-54.el4_6.1.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS:krb5-libs-0:1.3.4-54.el4_6.1.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS:krb5-libs-0:1.3.4-54.el4_6.1.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS:krb5-libs-0:1.3.4-54.el4_6.1.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS:krb5-libs-0:1.3.4-54.el4_6.1.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS:krb5-libs-0:1.3.4-54.el4_6.1.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS:krb5-server-0:1.3.4-54.el4_6.1.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS:krb5-server-0:1.3.4-54.el4_6.1.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS:krb5-server-0:1.3.4-54.el4_6.1.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS:krb5-server-0:1.3.4-54.el4_6.1.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS:krb5-server-0:1.3.4-54.el4_6.1.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS:krb5-server-0:1.3.4-54.el4_6.1.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS:krb5-workstation-0:1.3.4-54.el4_6.1.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS:krb5-workstation-0:1.3.4-54.el4_6.1.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS:krb5-workstation-0:1.3.4-54.el4_6.1.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS:krb5-workstation-0:1.3.4-54.el4_6.1.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS:krb5-workstation-0:1.3.4-54.el4_6.1.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS:krb5-workstation-0:1.3.4-54.el4_6.1.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4Desktop:krb5-0:1.3.4-54.el4_6.1.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4Desktop:krb5-debuginfo-0:1.3.4-54.el4_6.1.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4Desktop:krb5-debuginfo-0:1.3.4-54.el4_6.1.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4Desktop:krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4Desktop:krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4Desktop:krb5-debuginfo-0:1.3.4-54.el4_6.1.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4Desktop:krb5-debuginfo-0:1.3.4-54.el4_6.1.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4Desktop:krb5-debuginfo-0:1.3.4-54.el4_6.1.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4Desktop:krb5-devel-0:1.3.4-54.el4_6.1.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4Desktop:krb5-devel-0:1.3.4-54.el4_6.1.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4Desktop:krb5-devel-0:1.3.4-54.el4_6.1.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4Desktop:krb5-devel-0:1.3.4-54.el4_6.1.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4Desktop:krb5-devel-0:1.3.4-54.el4_6.1.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4Desktop:krb5-devel-0:1.3.4-54.el4_6.1.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4Desktop:krb5-libs-0:1.3.4-54.el4_6.1.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4Desktop:krb5-libs-0:1.3.4-54.el4_6.1.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4Desktop:krb5-libs-0:1.3.4-54.el4_6.1.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4Desktop:krb5-libs-0:1.3.4-54.el4_6.1.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4Desktop:krb5-libs-0:1.3.4-54.el4_6.1.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4Desktop:krb5-libs-0:1.3.4-54.el4_6.1.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4Desktop:krb5-libs-0:1.3.4-54.el4_6.1.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4Desktop:krb5-server-0:1.3.4-54.el4_6.1.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4Desktop:krb5-server-0:1.3.4-54.el4_6.1.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4Desktop:krb5-server-0:1.3.4-54.el4_6.1.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4Desktop:krb5-server-0:1.3.4-54.el4_6.1.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4Desktop:krb5-server-0:1.3.4-54.el4_6.1.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4Desktop:krb5-server-0:1.3.4-54.el4_6.1.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4Desktop:krb5-workstation-0:1.3.4-54.el4_6.1.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4Desktop:krb5-workstation-0:1.3.4-54.el4_6.1.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4Desktop:krb5-workstation-0:1.3.4-54.el4_6.1.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4Desktop:krb5-workstation-0:1.3.4-54.el4_6.1.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4Desktop:krb5-workstation-0:1.3.4-54.el4_6.1.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4Desktop:krb5-workstation-0:1.3.4-54.el4_6.1.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES:krb5-0:1.3.4-54.el4_6.1.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES:krb5-debuginfo-0:1.3.4-54.el4_6.1.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES:krb5-debuginfo-0:1.3.4-54.el4_6.1.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES:krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES:krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES:krb5-debuginfo-0:1.3.4-54.el4_6.1.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES:krb5-debuginfo-0:1.3.4-54.el4_6.1.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES:krb5-debuginfo-0:1.3.4-54.el4_6.1.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES:krb5-devel-0:1.3.4-54.el4_6.1.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES:krb5-devel-0:1.3.4-54.el4_6.1.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES:krb5-devel-0:1.3.4-54.el4_6.1.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES:krb5-devel-0:1.3.4-54.el4_6.1.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES:krb5-devel-0:1.3.4-54.el4_6.1.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES:krb5-devel-0:1.3.4-54.el4_6.1.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES:krb5-libs-0:1.3.4-54.el4_6.1.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES:krb5-libs-0:1.3.4-54.el4_6.1.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES:krb5-libs-0:1.3.4-54.el4_6.1.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES:krb5-libs-0:1.3.4-54.el4_6.1.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES:krb5-libs-0:1.3.4-54.el4_6.1.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES:krb5-libs-0:1.3.4-54.el4_6.1.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES:krb5-libs-0:1.3.4-54.el4_6.1.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES:krb5-server-0:1.3.4-54.el4_6.1.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES:krb5-server-0:1.3.4-54.el4_6.1.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES:krb5-server-0:1.3.4-54.el4_6.1.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES:krb5-server-0:1.3.4-54.el4_6.1.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES:krb5-server-0:1.3.4-54.el4_6.1.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES:krb5-server-0:1.3.4-54.el4_6.1.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES:krb5-workstation-0:1.3.4-54.el4_6.1.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES:krb5-workstation-0:1.3.4-54.el4_6.1.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES:krb5-workstation-0:1.3.4-54.el4_6.1.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES:krb5-workstation-0:1.3.4-54.el4_6.1.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES:krb5-workstation-0:1.3.4-54.el4_6.1.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES:krb5-workstation-0:1.3.4-54.el4_6.1.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS:krb5-0:1.3.4-54.el4_6.1.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS:krb5-debuginfo-0:1.3.4-54.el4_6.1.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS:krb5-debuginfo-0:1.3.4-54.el4_6.1.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS:krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS:krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS:krb5-debuginfo-0:1.3.4-54.el4_6.1.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS:krb5-debuginfo-0:1.3.4-54.el4_6.1.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS:krb5-debuginfo-0:1.3.4-54.el4_6.1.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS:krb5-devel-0:1.3.4-54.el4_6.1.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS:krb5-devel-0:1.3.4-54.el4_6.1.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS:krb5-devel-0:1.3.4-54.el4_6.1.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS:krb5-devel-0:1.3.4-54.el4_6.1.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS:krb5-devel-0:1.3.4-54.el4_6.1.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS:krb5-devel-0:1.3.4-54.el4_6.1.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS:krb5-libs-0:1.3.4-54.el4_6.1.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS:krb5-libs-0:1.3.4-54.el4_6.1.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS:krb5-libs-0:1.3.4-54.el4_6.1.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS:krb5-libs-0:1.3.4-54.el4_6.1.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS:krb5-libs-0:1.3.4-54.el4_6.1.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS:krb5-libs-0:1.3.4-54.el4_6.1.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS:krb5-libs-0:1.3.4-54.el4_6.1.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS:krb5-server-0:1.3.4-54.el4_6.1.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS:krb5-server-0:1.3.4-54.el4_6.1.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS:krb5-server-0:1.3.4-54.el4_6.1.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS:krb5-server-0:1.3.4-54.el4_6.1.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS:krb5-server-0:1.3.4-54.el4_6.1.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS:krb5-server-0:1.3.4-54.el4_6.1.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS:krb5-workstation-0:1.3.4-54.el4_6.1.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS:krb5-workstation-0:1.3.4-54.el4_6.1.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS:krb5-workstation-0:1.3.4-54.el4_6.1.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS:krb5-workstation-0:1.3.4-54.el4_6.1.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS:krb5-workstation-0:1.3.4-54.el4_6.1.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS:krb5-workstation-0:1.3.4-54.el4_6.1.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Critical
The Kerberos 4 support in KDC in MIT Kerberos 5 (krb5kdc) does not properly clear the unused portion of a buffer when generating an error message, which might allow remote attackers to obtain sensitive information, aka "Uninitialized stack values."
Affected products
Fixed
132 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 4AS:krb5-0:1.3.4-54.el4_6.1.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS:krb5-debuginfo-0:1.3.4-54.el4_6.1.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS:krb5-debuginfo-0:1.3.4-54.el4_6.1.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS:krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS:krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS:krb5-debuginfo-0:1.3.4-54.el4_6.1.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS:krb5-debuginfo-0:1.3.4-54.el4_6.1.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS:krb5-debuginfo-0:1.3.4-54.el4_6.1.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS:krb5-devel-0:1.3.4-54.el4_6.1.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS:krb5-devel-0:1.3.4-54.el4_6.1.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS:krb5-devel-0:1.3.4-54.el4_6.1.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS:krb5-devel-0:1.3.4-54.el4_6.1.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS:krb5-devel-0:1.3.4-54.el4_6.1.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS:krb5-devel-0:1.3.4-54.el4_6.1.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS:krb5-libs-0:1.3.4-54.el4_6.1.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS:krb5-libs-0:1.3.4-54.el4_6.1.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS:krb5-libs-0:1.3.4-54.el4_6.1.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS:krb5-libs-0:1.3.4-54.el4_6.1.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS:krb5-libs-0:1.3.4-54.el4_6.1.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS:krb5-libs-0:1.3.4-54.el4_6.1.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS:krb5-libs-0:1.3.4-54.el4_6.1.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS:krb5-server-0:1.3.4-54.el4_6.1.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS:krb5-server-0:1.3.4-54.el4_6.1.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS:krb5-server-0:1.3.4-54.el4_6.1.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS:krb5-server-0:1.3.4-54.el4_6.1.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS:krb5-server-0:1.3.4-54.el4_6.1.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS:krb5-server-0:1.3.4-54.el4_6.1.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS:krb5-workstation-0:1.3.4-54.el4_6.1.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS:krb5-workstation-0:1.3.4-54.el4_6.1.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS:krb5-workstation-0:1.3.4-54.el4_6.1.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS:krb5-workstation-0:1.3.4-54.el4_6.1.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS:krb5-workstation-0:1.3.4-54.el4_6.1.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS:krb5-workstation-0:1.3.4-54.el4_6.1.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4Desktop:krb5-0:1.3.4-54.el4_6.1.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4Desktop:krb5-debuginfo-0:1.3.4-54.el4_6.1.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4Desktop:krb5-debuginfo-0:1.3.4-54.el4_6.1.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4Desktop:krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4Desktop:krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4Desktop:krb5-debuginfo-0:1.3.4-54.el4_6.1.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4Desktop:krb5-debuginfo-0:1.3.4-54.el4_6.1.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4Desktop:krb5-debuginfo-0:1.3.4-54.el4_6.1.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4Desktop:krb5-devel-0:1.3.4-54.el4_6.1.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4Desktop:krb5-devel-0:1.3.4-54.el4_6.1.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4Desktop:krb5-devel-0:1.3.4-54.el4_6.1.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4Desktop:krb5-devel-0:1.3.4-54.el4_6.1.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4Desktop:krb5-devel-0:1.3.4-54.el4_6.1.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4Desktop:krb5-devel-0:1.3.4-54.el4_6.1.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4Desktop:krb5-libs-0:1.3.4-54.el4_6.1.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4Desktop:krb5-libs-0:1.3.4-54.el4_6.1.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4Desktop:krb5-libs-0:1.3.4-54.el4_6.1.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4Desktop:krb5-libs-0:1.3.4-54.el4_6.1.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4Desktop:krb5-libs-0:1.3.4-54.el4_6.1.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4Desktop:krb5-libs-0:1.3.4-54.el4_6.1.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4Desktop:krb5-libs-0:1.3.4-54.el4_6.1.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4Desktop:krb5-server-0:1.3.4-54.el4_6.1.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4Desktop:krb5-server-0:1.3.4-54.el4_6.1.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4Desktop:krb5-server-0:1.3.4-54.el4_6.1.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4Desktop:krb5-server-0:1.3.4-54.el4_6.1.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4Desktop:krb5-server-0:1.3.4-54.el4_6.1.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4Desktop:krb5-server-0:1.3.4-54.el4_6.1.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4Desktop:krb5-workstation-0:1.3.4-54.el4_6.1.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4Desktop:krb5-workstation-0:1.3.4-54.el4_6.1.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4Desktop:krb5-workstation-0:1.3.4-54.el4_6.1.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4Desktop:krb5-workstation-0:1.3.4-54.el4_6.1.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4Desktop:krb5-workstation-0:1.3.4-54.el4_6.1.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4Desktop:krb5-workstation-0:1.3.4-54.el4_6.1.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES:krb5-0:1.3.4-54.el4_6.1.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES:krb5-debuginfo-0:1.3.4-54.el4_6.1.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES:krb5-debuginfo-0:1.3.4-54.el4_6.1.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES:krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES:krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES:krb5-debuginfo-0:1.3.4-54.el4_6.1.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES:krb5-debuginfo-0:1.3.4-54.el4_6.1.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES:krb5-debuginfo-0:1.3.4-54.el4_6.1.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES:krb5-devel-0:1.3.4-54.el4_6.1.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES:krb5-devel-0:1.3.4-54.el4_6.1.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES:krb5-devel-0:1.3.4-54.el4_6.1.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES:krb5-devel-0:1.3.4-54.el4_6.1.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES:krb5-devel-0:1.3.4-54.el4_6.1.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES:krb5-devel-0:1.3.4-54.el4_6.1.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES:krb5-libs-0:1.3.4-54.el4_6.1.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES:krb5-libs-0:1.3.4-54.el4_6.1.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES:krb5-libs-0:1.3.4-54.el4_6.1.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES:krb5-libs-0:1.3.4-54.el4_6.1.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES:krb5-libs-0:1.3.4-54.el4_6.1.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES:krb5-libs-0:1.3.4-54.el4_6.1.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES:krb5-libs-0:1.3.4-54.el4_6.1.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES:krb5-server-0:1.3.4-54.el4_6.1.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES:krb5-server-0:1.3.4-54.el4_6.1.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES:krb5-server-0:1.3.4-54.el4_6.1.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES:krb5-server-0:1.3.4-54.el4_6.1.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES:krb5-server-0:1.3.4-54.el4_6.1.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES:krb5-server-0:1.3.4-54.el4_6.1.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES:krb5-workstation-0:1.3.4-54.el4_6.1.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES:krb5-workstation-0:1.3.4-54.el4_6.1.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES:krb5-workstation-0:1.3.4-54.el4_6.1.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES:krb5-workstation-0:1.3.4-54.el4_6.1.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES:krb5-workstation-0:1.3.4-54.el4_6.1.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES:krb5-workstation-0:1.3.4-54.el4_6.1.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS:krb5-0:1.3.4-54.el4_6.1.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS:krb5-debuginfo-0:1.3.4-54.el4_6.1.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS:krb5-debuginfo-0:1.3.4-54.el4_6.1.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS:krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS:krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS:krb5-debuginfo-0:1.3.4-54.el4_6.1.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS:krb5-debuginfo-0:1.3.4-54.el4_6.1.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS:krb5-debuginfo-0:1.3.4-54.el4_6.1.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS:krb5-devel-0:1.3.4-54.el4_6.1.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS:krb5-devel-0:1.3.4-54.el4_6.1.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS:krb5-devel-0:1.3.4-54.el4_6.1.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS:krb5-devel-0:1.3.4-54.el4_6.1.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS:krb5-devel-0:1.3.4-54.el4_6.1.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS:krb5-devel-0:1.3.4-54.el4_6.1.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS:krb5-libs-0:1.3.4-54.el4_6.1.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS:krb5-libs-0:1.3.4-54.el4_6.1.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS:krb5-libs-0:1.3.4-54.el4_6.1.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS:krb5-libs-0:1.3.4-54.el4_6.1.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS:krb5-libs-0:1.3.4-54.el4_6.1.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS:krb5-libs-0:1.3.4-54.el4_6.1.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS:krb5-libs-0:1.3.4-54.el4_6.1.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS:krb5-server-0:1.3.4-54.el4_6.1.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS:krb5-server-0:1.3.4-54.el4_6.1.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS:krb5-server-0:1.3.4-54.el4_6.1.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS:krb5-server-0:1.3.4-54.el4_6.1.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS:krb5-server-0:1.3.4-54.el4_6.1.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS:krb5-server-0:1.3.4-54.el4_6.1.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS:krb5-workstation-0:1.3.4-54.el4_6.1.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS:krb5-workstation-0:1.3.4-54.el4_6.1.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS:krb5-workstation-0:1.3.4-54.el4_6.1.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS:krb5-workstation-0:1.3.4-54.el4_6.1.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS:krb5-workstation-0:1.3.4-54.el4_6.1.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS:krb5-workstation-0:1.3.4-54.el4_6.1.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Moderate
References
18 references
Acknowledgments
MIT
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Critical"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Updated krb5 packages that fix multiple security issues are now available\nfor Red Hat Enterprise Linux 4.\n\nThis update has been rated as having critical security impact by the Red\nHat Security Response Team.",
"title": "Topic"
},
{
"category": "general",
"text": "Kerberos is a network authentication system which allows clients and\nservers to authenticate to each other through use of symmetric encryption\nand a trusted third party, the KDC.\n\nA flaw was found in the way the MIT Kerberos Authentication Service and Key\nDistribution Center server (krb5kdc) handled Kerberos v4 protocol packets.\nAn unauthenticated remote attacker could use this flaw to crash the\nkrb5kdc daemon, disclose portions of its memory, or possibly execute\narbitrary code using malformed or truncated Kerberos v4 protocol\nrequests. (CVE-2008-0062, CVE-2008-0063)\n\nThis issue only affected krb5kdc with Kerberos v4 protocol compatibility\nenabled, which is the default setting on Red Hat Enterprise Linux 4.\nKerberos v4 protocol support can be disabled by adding \"v4_mode=none\"\n(without the quotes) to the \"[kdcdefaults]\" section of\n/var/kerberos/krb5kdc/kdc.conf.\n\nRed Hat would like to thank MIT for reporting these issues.\n\nA double-free flaw was discovered in the GSSAPI library used by MIT\nKerberos. This flaw could possibly cause a crash of the application using\nthe GSSAPI library. (CVE-2007-5971)\n\nAll krb5 users are advised to update to these erratum packages which\ncontain backported fixes to correct these issues.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2008:0180",
"url": "https://access.redhat.com/errata/RHSA-2008:0180"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#critical",
"url": "https://access.redhat.com/security/updates/classification/#critical"
},
{
"category": "external",
"summary": "415351",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=415351"
},
{
"category": "external",
"summary": "432620",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=432620"
},
{
"category": "external",
"summary": "432621",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=432621"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0180.json"
}
],
"title": "Red Hat Security Advisory: krb5 security update",
"tracking": {
"current_release_date": "2025-11-21T17:33:03+00:00",
"generator": {
"date": "2025-11-21T17:33:03+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.12"
}
},
"id": "RHSA-2008:0180",
"initial_release_date": "2008-03-18T18:35:00+00:00",
"revision_history": [
{
"date": "2008-03-18T18:35:00+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2008-03-18T14:47:13+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-11-21T17:33:03+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AS version 4",
"product": {
"name": "Red Hat Enterprise Linux AS version 4",
"product_id": "4AS",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:4::as"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Desktop version 4",
"product": {
"name": "Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:4::desktop"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux ES version 4",
"product": {
"name": "Red Hat Enterprise Linux ES version 4",
"product_id": "4ES",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:4::es"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux WS version 4",
"product": {
"name": "Red Hat Enterprise Linux WS version 4",
"product_id": "4WS",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:4::ws"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "krb5-devel-0:1.3.4-54.el4_6.1.ia64",
"product": {
"name": "krb5-devel-0:1.3.4-54.el4_6.1.ia64",
"product_id": "krb5-devel-0:1.3.4-54.el4_6.1.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/krb5-devel@1.3.4-54.el4_6.1?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "krb5-server-0:1.3.4-54.el4_6.1.ia64",
"product": {
"name": "krb5-server-0:1.3.4-54.el4_6.1.ia64",
"product_id": "krb5-server-0:1.3.4-54.el4_6.1.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/krb5-server@1.3.4-54.el4_6.1?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "krb5-workstation-0:1.3.4-54.el4_6.1.ia64",
"product": {
"name": "krb5-workstation-0:1.3.4-54.el4_6.1.ia64",
"product_id": "krb5-workstation-0:1.3.4-54.el4_6.1.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/krb5-workstation@1.3.4-54.el4_6.1?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "krb5-debuginfo-0:1.3.4-54.el4_6.1.ia64",
"product": {
"name": "krb5-debuginfo-0:1.3.4-54.el4_6.1.ia64",
"product_id": "krb5-debuginfo-0:1.3.4-54.el4_6.1.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/krb5-debuginfo@1.3.4-54.el4_6.1?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "krb5-libs-0:1.3.4-54.el4_6.1.ia64",
"product": {
"name": "krb5-libs-0:1.3.4-54.el4_6.1.ia64",
"product_id": "krb5-libs-0:1.3.4-54.el4_6.1.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/krb5-libs@1.3.4-54.el4_6.1?arch=ia64"
}
}
}
],
"category": "architecture",
"name": "ia64"
},
{
"branches": [
{
"category": "product_version",
"name": "krb5-debuginfo-0:1.3.4-54.el4_6.1.i386",
"product": {
"name": "krb5-debuginfo-0:1.3.4-54.el4_6.1.i386",
"product_id": "krb5-debuginfo-0:1.3.4-54.el4_6.1.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/krb5-debuginfo@1.3.4-54.el4_6.1?arch=i386"
}
}
},
{
"category": "product_version",
"name": "krb5-libs-0:1.3.4-54.el4_6.1.i386",
"product": {
"name": "krb5-libs-0:1.3.4-54.el4_6.1.i386",
"product_id": "krb5-libs-0:1.3.4-54.el4_6.1.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/krb5-libs@1.3.4-54.el4_6.1?arch=i386"
}
}
},
{
"category": "product_version",
"name": "krb5-devel-0:1.3.4-54.el4_6.1.i386",
"product": {
"name": "krb5-devel-0:1.3.4-54.el4_6.1.i386",
"product_id": "krb5-devel-0:1.3.4-54.el4_6.1.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/krb5-devel@1.3.4-54.el4_6.1?arch=i386"
}
}
},
{
"category": "product_version",
"name": "krb5-server-0:1.3.4-54.el4_6.1.i386",
"product": {
"name": "krb5-server-0:1.3.4-54.el4_6.1.i386",
"product_id": "krb5-server-0:1.3.4-54.el4_6.1.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/krb5-server@1.3.4-54.el4_6.1?arch=i386"
}
}
},
{
"category": "product_version",
"name": "krb5-workstation-0:1.3.4-54.el4_6.1.i386",
"product": {
"name": "krb5-workstation-0:1.3.4-54.el4_6.1.i386",
"product_id": "krb5-workstation-0:1.3.4-54.el4_6.1.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/krb5-workstation@1.3.4-54.el4_6.1?arch=i386"
}
}
}
],
"category": "architecture",
"name": "i386"
},
{
"branches": [
{
"category": "product_version",
"name": "krb5-devel-0:1.3.4-54.el4_6.1.x86_64",
"product": {
"name": "krb5-devel-0:1.3.4-54.el4_6.1.x86_64",
"product_id": "krb5-devel-0:1.3.4-54.el4_6.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/krb5-devel@1.3.4-54.el4_6.1?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "krb5-server-0:1.3.4-54.el4_6.1.x86_64",
"product": {
"name": "krb5-server-0:1.3.4-54.el4_6.1.x86_64",
"product_id": "krb5-server-0:1.3.4-54.el4_6.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/krb5-server@1.3.4-54.el4_6.1?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "krb5-workstation-0:1.3.4-54.el4_6.1.x86_64",
"product": {
"name": "krb5-workstation-0:1.3.4-54.el4_6.1.x86_64",
"product_id": "krb5-workstation-0:1.3.4-54.el4_6.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/krb5-workstation@1.3.4-54.el4_6.1?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "krb5-debuginfo-0:1.3.4-54.el4_6.1.x86_64",
"product": {
"name": "krb5-debuginfo-0:1.3.4-54.el4_6.1.x86_64",
"product_id": "krb5-debuginfo-0:1.3.4-54.el4_6.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/krb5-debuginfo@1.3.4-54.el4_6.1?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "krb5-libs-0:1.3.4-54.el4_6.1.x86_64",
"product": {
"name": "krb5-libs-0:1.3.4-54.el4_6.1.x86_64",
"product_id": "krb5-libs-0:1.3.4-54.el4_6.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/krb5-libs@1.3.4-54.el4_6.1?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "krb5-0:1.3.4-54.el4_6.1.src",
"product": {
"name": "krb5-0:1.3.4-54.el4_6.1.src",
"product_id": "krb5-0:1.3.4-54.el4_6.1.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/krb5@1.3.4-54.el4_6.1?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "krb5-devel-0:1.3.4-54.el4_6.1.ppc",
"product": {
"name": "krb5-devel-0:1.3.4-54.el4_6.1.ppc",
"product_id": "krb5-devel-0:1.3.4-54.el4_6.1.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/krb5-devel@1.3.4-54.el4_6.1?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "krb5-server-0:1.3.4-54.el4_6.1.ppc",
"product": {
"name": "krb5-server-0:1.3.4-54.el4_6.1.ppc",
"product_id": "krb5-server-0:1.3.4-54.el4_6.1.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/krb5-server@1.3.4-54.el4_6.1?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "krb5-workstation-0:1.3.4-54.el4_6.1.ppc",
"product": {
"name": "krb5-workstation-0:1.3.4-54.el4_6.1.ppc",
"product_id": "krb5-workstation-0:1.3.4-54.el4_6.1.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/krb5-workstation@1.3.4-54.el4_6.1?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc",
"product": {
"name": "krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc",
"product_id": "krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/krb5-debuginfo@1.3.4-54.el4_6.1?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "krb5-libs-0:1.3.4-54.el4_6.1.ppc",
"product": {
"name": "krb5-libs-0:1.3.4-54.el4_6.1.ppc",
"product_id": "krb5-libs-0:1.3.4-54.el4_6.1.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/krb5-libs@1.3.4-54.el4_6.1?arch=ppc"
}
}
}
],
"category": "architecture",
"name": "ppc"
},
{
"branches": [
{
"category": "product_version",
"name": "krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc64",
"product": {
"name": "krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc64",
"product_id": "krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/krb5-debuginfo@1.3.4-54.el4_6.1?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "krb5-libs-0:1.3.4-54.el4_6.1.ppc64",
"product": {
"name": "krb5-libs-0:1.3.4-54.el4_6.1.ppc64",
"product_id": "krb5-libs-0:1.3.4-54.el4_6.1.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/krb5-libs@1.3.4-54.el4_6.1?arch=ppc64"
}
}
}
],
"category": "architecture",
"name": "ppc64"
},
{
"branches": [
{
"category": "product_version",
"name": "krb5-devel-0:1.3.4-54.el4_6.1.s390x",
"product": {
"name": "krb5-devel-0:1.3.4-54.el4_6.1.s390x",
"product_id": "krb5-devel-0:1.3.4-54.el4_6.1.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/krb5-devel@1.3.4-54.el4_6.1?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "krb5-server-0:1.3.4-54.el4_6.1.s390x",
"product": {
"name": "krb5-server-0:1.3.4-54.el4_6.1.s390x",
"product_id": "krb5-server-0:1.3.4-54.el4_6.1.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/krb5-server@1.3.4-54.el4_6.1?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "krb5-workstation-0:1.3.4-54.el4_6.1.s390x",
"product": {
"name": "krb5-workstation-0:1.3.4-54.el4_6.1.s390x",
"product_id": "krb5-workstation-0:1.3.4-54.el4_6.1.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/krb5-workstation@1.3.4-54.el4_6.1?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "krb5-debuginfo-0:1.3.4-54.el4_6.1.s390x",
"product": {
"name": "krb5-debuginfo-0:1.3.4-54.el4_6.1.s390x",
"product_id": "krb5-debuginfo-0:1.3.4-54.el4_6.1.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/krb5-debuginfo@1.3.4-54.el4_6.1?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "krb5-libs-0:1.3.4-54.el4_6.1.s390x",
"product": {
"name": "krb5-libs-0:1.3.4-54.el4_6.1.s390x",
"product_id": "krb5-libs-0:1.3.4-54.el4_6.1.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/krb5-libs@1.3.4-54.el4_6.1?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "krb5-debuginfo-0:1.3.4-54.el4_6.1.s390",
"product": {
"name": "krb5-debuginfo-0:1.3.4-54.el4_6.1.s390",
"product_id": "krb5-debuginfo-0:1.3.4-54.el4_6.1.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/krb5-debuginfo@1.3.4-54.el4_6.1?arch=s390"
}
}
},
{
"category": "product_version",
"name": "krb5-libs-0:1.3.4-54.el4_6.1.s390",
"product": {
"name": "krb5-libs-0:1.3.4-54.el4_6.1.s390",
"product_id": "krb5-libs-0:1.3.4-54.el4_6.1.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/krb5-libs@1.3.4-54.el4_6.1?arch=s390"
}
}
},
{
"category": "product_version",
"name": "krb5-devel-0:1.3.4-54.el4_6.1.s390",
"product": {
"name": "krb5-devel-0:1.3.4-54.el4_6.1.s390",
"product_id": "krb5-devel-0:1.3.4-54.el4_6.1.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/krb5-devel@1.3.4-54.el4_6.1?arch=s390"
}
}
},
{
"category": "product_version",
"name": "krb5-server-0:1.3.4-54.el4_6.1.s390",
"product": {
"name": "krb5-server-0:1.3.4-54.el4_6.1.s390",
"product_id": "krb5-server-0:1.3.4-54.el4_6.1.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/krb5-server@1.3.4-54.el4_6.1?arch=s390"
}
}
},
{
"category": "product_version",
"name": "krb5-workstation-0:1.3.4-54.el4_6.1.s390",
"product": {
"name": "krb5-workstation-0:1.3.4-54.el4_6.1.s390",
"product_id": "krb5-workstation-0:1.3.4-54.el4_6.1.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/krb5-workstation@1.3.4-54.el4_6.1?arch=s390"
}
}
}
],
"category": "architecture",
"name": "s390"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-0:1.3.4-54.el4_6.1.src as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:krb5-0:1.3.4-54.el4_6.1.src"
},
"product_reference": "krb5-0:1.3.4-54.el4_6.1.src",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-debuginfo-0:1.3.4-54.el4_6.1.i386 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:krb5-debuginfo-0:1.3.4-54.el4_6.1.i386"
},
"product_reference": "krb5-debuginfo-0:1.3.4-54.el4_6.1.i386",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-debuginfo-0:1.3.4-54.el4_6.1.ia64 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:krb5-debuginfo-0:1.3.4-54.el4_6.1.ia64"
},
"product_reference": "krb5-debuginfo-0:1.3.4-54.el4_6.1.ia64",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc"
},
"product_reference": "krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc64 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc64"
},
"product_reference": "krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc64",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-debuginfo-0:1.3.4-54.el4_6.1.s390 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:krb5-debuginfo-0:1.3.4-54.el4_6.1.s390"
},
"product_reference": "krb5-debuginfo-0:1.3.4-54.el4_6.1.s390",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-debuginfo-0:1.3.4-54.el4_6.1.s390x as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:krb5-debuginfo-0:1.3.4-54.el4_6.1.s390x"
},
"product_reference": "krb5-debuginfo-0:1.3.4-54.el4_6.1.s390x",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-debuginfo-0:1.3.4-54.el4_6.1.x86_64 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:krb5-debuginfo-0:1.3.4-54.el4_6.1.x86_64"
},
"product_reference": "krb5-debuginfo-0:1.3.4-54.el4_6.1.x86_64",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-devel-0:1.3.4-54.el4_6.1.i386 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:krb5-devel-0:1.3.4-54.el4_6.1.i386"
},
"product_reference": "krb5-devel-0:1.3.4-54.el4_6.1.i386",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-devel-0:1.3.4-54.el4_6.1.ia64 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:krb5-devel-0:1.3.4-54.el4_6.1.ia64"
},
"product_reference": "krb5-devel-0:1.3.4-54.el4_6.1.ia64",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-devel-0:1.3.4-54.el4_6.1.ppc as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:krb5-devel-0:1.3.4-54.el4_6.1.ppc"
},
"product_reference": "krb5-devel-0:1.3.4-54.el4_6.1.ppc",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-devel-0:1.3.4-54.el4_6.1.s390 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:krb5-devel-0:1.3.4-54.el4_6.1.s390"
},
"product_reference": "krb5-devel-0:1.3.4-54.el4_6.1.s390",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-devel-0:1.3.4-54.el4_6.1.s390x as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:krb5-devel-0:1.3.4-54.el4_6.1.s390x"
},
"product_reference": "krb5-devel-0:1.3.4-54.el4_6.1.s390x",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-devel-0:1.3.4-54.el4_6.1.x86_64 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:krb5-devel-0:1.3.4-54.el4_6.1.x86_64"
},
"product_reference": "krb5-devel-0:1.3.4-54.el4_6.1.x86_64",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-libs-0:1.3.4-54.el4_6.1.i386 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:krb5-libs-0:1.3.4-54.el4_6.1.i386"
},
"product_reference": "krb5-libs-0:1.3.4-54.el4_6.1.i386",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-libs-0:1.3.4-54.el4_6.1.ia64 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:krb5-libs-0:1.3.4-54.el4_6.1.ia64"
},
"product_reference": "krb5-libs-0:1.3.4-54.el4_6.1.ia64",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-libs-0:1.3.4-54.el4_6.1.ppc as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:krb5-libs-0:1.3.4-54.el4_6.1.ppc"
},
"product_reference": "krb5-libs-0:1.3.4-54.el4_6.1.ppc",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-libs-0:1.3.4-54.el4_6.1.ppc64 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:krb5-libs-0:1.3.4-54.el4_6.1.ppc64"
},
"product_reference": "krb5-libs-0:1.3.4-54.el4_6.1.ppc64",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-libs-0:1.3.4-54.el4_6.1.s390 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:krb5-libs-0:1.3.4-54.el4_6.1.s390"
},
"product_reference": "krb5-libs-0:1.3.4-54.el4_6.1.s390",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-libs-0:1.3.4-54.el4_6.1.s390x as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:krb5-libs-0:1.3.4-54.el4_6.1.s390x"
},
"product_reference": "krb5-libs-0:1.3.4-54.el4_6.1.s390x",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-libs-0:1.3.4-54.el4_6.1.x86_64 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:krb5-libs-0:1.3.4-54.el4_6.1.x86_64"
},
"product_reference": "krb5-libs-0:1.3.4-54.el4_6.1.x86_64",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-server-0:1.3.4-54.el4_6.1.i386 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:krb5-server-0:1.3.4-54.el4_6.1.i386"
},
"product_reference": "krb5-server-0:1.3.4-54.el4_6.1.i386",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-server-0:1.3.4-54.el4_6.1.ia64 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:krb5-server-0:1.3.4-54.el4_6.1.ia64"
},
"product_reference": "krb5-server-0:1.3.4-54.el4_6.1.ia64",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-server-0:1.3.4-54.el4_6.1.ppc as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:krb5-server-0:1.3.4-54.el4_6.1.ppc"
},
"product_reference": "krb5-server-0:1.3.4-54.el4_6.1.ppc",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-server-0:1.3.4-54.el4_6.1.s390 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:krb5-server-0:1.3.4-54.el4_6.1.s390"
},
"product_reference": "krb5-server-0:1.3.4-54.el4_6.1.s390",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-server-0:1.3.4-54.el4_6.1.s390x as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:krb5-server-0:1.3.4-54.el4_6.1.s390x"
},
"product_reference": "krb5-server-0:1.3.4-54.el4_6.1.s390x",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-server-0:1.3.4-54.el4_6.1.x86_64 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:krb5-server-0:1.3.4-54.el4_6.1.x86_64"
},
"product_reference": "krb5-server-0:1.3.4-54.el4_6.1.x86_64",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-workstation-0:1.3.4-54.el4_6.1.i386 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:krb5-workstation-0:1.3.4-54.el4_6.1.i386"
},
"product_reference": "krb5-workstation-0:1.3.4-54.el4_6.1.i386",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-workstation-0:1.3.4-54.el4_6.1.ia64 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:krb5-workstation-0:1.3.4-54.el4_6.1.ia64"
},
"product_reference": "krb5-workstation-0:1.3.4-54.el4_6.1.ia64",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-workstation-0:1.3.4-54.el4_6.1.ppc as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:krb5-workstation-0:1.3.4-54.el4_6.1.ppc"
},
"product_reference": "krb5-workstation-0:1.3.4-54.el4_6.1.ppc",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-workstation-0:1.3.4-54.el4_6.1.s390 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:krb5-workstation-0:1.3.4-54.el4_6.1.s390"
},
"product_reference": "krb5-workstation-0:1.3.4-54.el4_6.1.s390",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-workstation-0:1.3.4-54.el4_6.1.s390x as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:krb5-workstation-0:1.3.4-54.el4_6.1.s390x"
},
"product_reference": "krb5-workstation-0:1.3.4-54.el4_6.1.s390x",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-workstation-0:1.3.4-54.el4_6.1.x86_64 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:krb5-workstation-0:1.3.4-54.el4_6.1.x86_64"
},
"product_reference": "krb5-workstation-0:1.3.4-54.el4_6.1.x86_64",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-0:1.3.4-54.el4_6.1.src as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:krb5-0:1.3.4-54.el4_6.1.src"
},
"product_reference": "krb5-0:1.3.4-54.el4_6.1.src",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-debuginfo-0:1.3.4-54.el4_6.1.i386 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:krb5-debuginfo-0:1.3.4-54.el4_6.1.i386"
},
"product_reference": "krb5-debuginfo-0:1.3.4-54.el4_6.1.i386",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-debuginfo-0:1.3.4-54.el4_6.1.ia64 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:krb5-debuginfo-0:1.3.4-54.el4_6.1.ia64"
},
"product_reference": "krb5-debuginfo-0:1.3.4-54.el4_6.1.ia64",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc"
},
"product_reference": "krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc64 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc64"
},
"product_reference": "krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc64",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-debuginfo-0:1.3.4-54.el4_6.1.s390 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:krb5-debuginfo-0:1.3.4-54.el4_6.1.s390"
},
"product_reference": "krb5-debuginfo-0:1.3.4-54.el4_6.1.s390",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-debuginfo-0:1.3.4-54.el4_6.1.s390x as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:krb5-debuginfo-0:1.3.4-54.el4_6.1.s390x"
},
"product_reference": "krb5-debuginfo-0:1.3.4-54.el4_6.1.s390x",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-debuginfo-0:1.3.4-54.el4_6.1.x86_64 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:krb5-debuginfo-0:1.3.4-54.el4_6.1.x86_64"
},
"product_reference": "krb5-debuginfo-0:1.3.4-54.el4_6.1.x86_64",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-devel-0:1.3.4-54.el4_6.1.i386 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:krb5-devel-0:1.3.4-54.el4_6.1.i386"
},
"product_reference": "krb5-devel-0:1.3.4-54.el4_6.1.i386",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-devel-0:1.3.4-54.el4_6.1.ia64 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:krb5-devel-0:1.3.4-54.el4_6.1.ia64"
},
"product_reference": "krb5-devel-0:1.3.4-54.el4_6.1.ia64",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-devel-0:1.3.4-54.el4_6.1.ppc as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:krb5-devel-0:1.3.4-54.el4_6.1.ppc"
},
"product_reference": "krb5-devel-0:1.3.4-54.el4_6.1.ppc",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-devel-0:1.3.4-54.el4_6.1.s390 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:krb5-devel-0:1.3.4-54.el4_6.1.s390"
},
"product_reference": "krb5-devel-0:1.3.4-54.el4_6.1.s390",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-devel-0:1.3.4-54.el4_6.1.s390x as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:krb5-devel-0:1.3.4-54.el4_6.1.s390x"
},
"product_reference": "krb5-devel-0:1.3.4-54.el4_6.1.s390x",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-devel-0:1.3.4-54.el4_6.1.x86_64 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:krb5-devel-0:1.3.4-54.el4_6.1.x86_64"
},
"product_reference": "krb5-devel-0:1.3.4-54.el4_6.1.x86_64",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-libs-0:1.3.4-54.el4_6.1.i386 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:krb5-libs-0:1.3.4-54.el4_6.1.i386"
},
"product_reference": "krb5-libs-0:1.3.4-54.el4_6.1.i386",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-libs-0:1.3.4-54.el4_6.1.ia64 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:krb5-libs-0:1.3.4-54.el4_6.1.ia64"
},
"product_reference": "krb5-libs-0:1.3.4-54.el4_6.1.ia64",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-libs-0:1.3.4-54.el4_6.1.ppc as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:krb5-libs-0:1.3.4-54.el4_6.1.ppc"
},
"product_reference": "krb5-libs-0:1.3.4-54.el4_6.1.ppc",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-libs-0:1.3.4-54.el4_6.1.ppc64 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:krb5-libs-0:1.3.4-54.el4_6.1.ppc64"
},
"product_reference": "krb5-libs-0:1.3.4-54.el4_6.1.ppc64",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-libs-0:1.3.4-54.el4_6.1.s390 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:krb5-libs-0:1.3.4-54.el4_6.1.s390"
},
"product_reference": "krb5-libs-0:1.3.4-54.el4_6.1.s390",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-libs-0:1.3.4-54.el4_6.1.s390x as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:krb5-libs-0:1.3.4-54.el4_6.1.s390x"
},
"product_reference": "krb5-libs-0:1.3.4-54.el4_6.1.s390x",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-libs-0:1.3.4-54.el4_6.1.x86_64 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:krb5-libs-0:1.3.4-54.el4_6.1.x86_64"
},
"product_reference": "krb5-libs-0:1.3.4-54.el4_6.1.x86_64",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-server-0:1.3.4-54.el4_6.1.i386 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:krb5-server-0:1.3.4-54.el4_6.1.i386"
},
"product_reference": "krb5-server-0:1.3.4-54.el4_6.1.i386",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-server-0:1.3.4-54.el4_6.1.ia64 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:krb5-server-0:1.3.4-54.el4_6.1.ia64"
},
"product_reference": "krb5-server-0:1.3.4-54.el4_6.1.ia64",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-server-0:1.3.4-54.el4_6.1.ppc as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:krb5-server-0:1.3.4-54.el4_6.1.ppc"
},
"product_reference": "krb5-server-0:1.3.4-54.el4_6.1.ppc",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-server-0:1.3.4-54.el4_6.1.s390 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:krb5-server-0:1.3.4-54.el4_6.1.s390"
},
"product_reference": "krb5-server-0:1.3.4-54.el4_6.1.s390",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-server-0:1.3.4-54.el4_6.1.s390x as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:krb5-server-0:1.3.4-54.el4_6.1.s390x"
},
"product_reference": "krb5-server-0:1.3.4-54.el4_6.1.s390x",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-server-0:1.3.4-54.el4_6.1.x86_64 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:krb5-server-0:1.3.4-54.el4_6.1.x86_64"
},
"product_reference": "krb5-server-0:1.3.4-54.el4_6.1.x86_64",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-workstation-0:1.3.4-54.el4_6.1.i386 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:krb5-workstation-0:1.3.4-54.el4_6.1.i386"
},
"product_reference": "krb5-workstation-0:1.3.4-54.el4_6.1.i386",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-workstation-0:1.3.4-54.el4_6.1.ia64 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:krb5-workstation-0:1.3.4-54.el4_6.1.ia64"
},
"product_reference": "krb5-workstation-0:1.3.4-54.el4_6.1.ia64",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-workstation-0:1.3.4-54.el4_6.1.ppc as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:krb5-workstation-0:1.3.4-54.el4_6.1.ppc"
},
"product_reference": "krb5-workstation-0:1.3.4-54.el4_6.1.ppc",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-workstation-0:1.3.4-54.el4_6.1.s390 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:krb5-workstation-0:1.3.4-54.el4_6.1.s390"
},
"product_reference": "krb5-workstation-0:1.3.4-54.el4_6.1.s390",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-workstation-0:1.3.4-54.el4_6.1.s390x as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:krb5-workstation-0:1.3.4-54.el4_6.1.s390x"
},
"product_reference": "krb5-workstation-0:1.3.4-54.el4_6.1.s390x",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-workstation-0:1.3.4-54.el4_6.1.x86_64 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:krb5-workstation-0:1.3.4-54.el4_6.1.x86_64"
},
"product_reference": "krb5-workstation-0:1.3.4-54.el4_6.1.x86_64",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-0:1.3.4-54.el4_6.1.src as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:krb5-0:1.3.4-54.el4_6.1.src"
},
"product_reference": "krb5-0:1.3.4-54.el4_6.1.src",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-debuginfo-0:1.3.4-54.el4_6.1.i386 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:krb5-debuginfo-0:1.3.4-54.el4_6.1.i386"
},
"product_reference": "krb5-debuginfo-0:1.3.4-54.el4_6.1.i386",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-debuginfo-0:1.3.4-54.el4_6.1.ia64 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:krb5-debuginfo-0:1.3.4-54.el4_6.1.ia64"
},
"product_reference": "krb5-debuginfo-0:1.3.4-54.el4_6.1.ia64",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc"
},
"product_reference": "krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc64 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc64"
},
"product_reference": "krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc64",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-debuginfo-0:1.3.4-54.el4_6.1.s390 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:krb5-debuginfo-0:1.3.4-54.el4_6.1.s390"
},
"product_reference": "krb5-debuginfo-0:1.3.4-54.el4_6.1.s390",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-debuginfo-0:1.3.4-54.el4_6.1.s390x as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:krb5-debuginfo-0:1.3.4-54.el4_6.1.s390x"
},
"product_reference": "krb5-debuginfo-0:1.3.4-54.el4_6.1.s390x",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-debuginfo-0:1.3.4-54.el4_6.1.x86_64 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:krb5-debuginfo-0:1.3.4-54.el4_6.1.x86_64"
},
"product_reference": "krb5-debuginfo-0:1.3.4-54.el4_6.1.x86_64",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-devel-0:1.3.4-54.el4_6.1.i386 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:krb5-devel-0:1.3.4-54.el4_6.1.i386"
},
"product_reference": "krb5-devel-0:1.3.4-54.el4_6.1.i386",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-devel-0:1.3.4-54.el4_6.1.ia64 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:krb5-devel-0:1.3.4-54.el4_6.1.ia64"
},
"product_reference": "krb5-devel-0:1.3.4-54.el4_6.1.ia64",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-devel-0:1.3.4-54.el4_6.1.ppc as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:krb5-devel-0:1.3.4-54.el4_6.1.ppc"
},
"product_reference": "krb5-devel-0:1.3.4-54.el4_6.1.ppc",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-devel-0:1.3.4-54.el4_6.1.s390 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:krb5-devel-0:1.3.4-54.el4_6.1.s390"
},
"product_reference": "krb5-devel-0:1.3.4-54.el4_6.1.s390",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-devel-0:1.3.4-54.el4_6.1.s390x as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:krb5-devel-0:1.3.4-54.el4_6.1.s390x"
},
"product_reference": "krb5-devel-0:1.3.4-54.el4_6.1.s390x",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-devel-0:1.3.4-54.el4_6.1.x86_64 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:krb5-devel-0:1.3.4-54.el4_6.1.x86_64"
},
"product_reference": "krb5-devel-0:1.3.4-54.el4_6.1.x86_64",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-libs-0:1.3.4-54.el4_6.1.i386 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:krb5-libs-0:1.3.4-54.el4_6.1.i386"
},
"product_reference": "krb5-libs-0:1.3.4-54.el4_6.1.i386",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-libs-0:1.3.4-54.el4_6.1.ia64 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:krb5-libs-0:1.3.4-54.el4_6.1.ia64"
},
"product_reference": "krb5-libs-0:1.3.4-54.el4_6.1.ia64",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-libs-0:1.3.4-54.el4_6.1.ppc as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:krb5-libs-0:1.3.4-54.el4_6.1.ppc"
},
"product_reference": "krb5-libs-0:1.3.4-54.el4_6.1.ppc",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-libs-0:1.3.4-54.el4_6.1.ppc64 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:krb5-libs-0:1.3.4-54.el4_6.1.ppc64"
},
"product_reference": "krb5-libs-0:1.3.4-54.el4_6.1.ppc64",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-libs-0:1.3.4-54.el4_6.1.s390 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:krb5-libs-0:1.3.4-54.el4_6.1.s390"
},
"product_reference": "krb5-libs-0:1.3.4-54.el4_6.1.s390",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-libs-0:1.3.4-54.el4_6.1.s390x as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:krb5-libs-0:1.3.4-54.el4_6.1.s390x"
},
"product_reference": "krb5-libs-0:1.3.4-54.el4_6.1.s390x",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-libs-0:1.3.4-54.el4_6.1.x86_64 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:krb5-libs-0:1.3.4-54.el4_6.1.x86_64"
},
"product_reference": "krb5-libs-0:1.3.4-54.el4_6.1.x86_64",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-server-0:1.3.4-54.el4_6.1.i386 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:krb5-server-0:1.3.4-54.el4_6.1.i386"
},
"product_reference": "krb5-server-0:1.3.4-54.el4_6.1.i386",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-server-0:1.3.4-54.el4_6.1.ia64 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:krb5-server-0:1.3.4-54.el4_6.1.ia64"
},
"product_reference": "krb5-server-0:1.3.4-54.el4_6.1.ia64",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-server-0:1.3.4-54.el4_6.1.ppc as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:krb5-server-0:1.3.4-54.el4_6.1.ppc"
},
"product_reference": "krb5-server-0:1.3.4-54.el4_6.1.ppc",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-server-0:1.3.4-54.el4_6.1.s390 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:krb5-server-0:1.3.4-54.el4_6.1.s390"
},
"product_reference": "krb5-server-0:1.3.4-54.el4_6.1.s390",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-server-0:1.3.4-54.el4_6.1.s390x as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:krb5-server-0:1.3.4-54.el4_6.1.s390x"
},
"product_reference": "krb5-server-0:1.3.4-54.el4_6.1.s390x",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-server-0:1.3.4-54.el4_6.1.x86_64 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:krb5-server-0:1.3.4-54.el4_6.1.x86_64"
},
"product_reference": "krb5-server-0:1.3.4-54.el4_6.1.x86_64",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-workstation-0:1.3.4-54.el4_6.1.i386 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:krb5-workstation-0:1.3.4-54.el4_6.1.i386"
},
"product_reference": "krb5-workstation-0:1.3.4-54.el4_6.1.i386",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-workstation-0:1.3.4-54.el4_6.1.ia64 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:krb5-workstation-0:1.3.4-54.el4_6.1.ia64"
},
"product_reference": "krb5-workstation-0:1.3.4-54.el4_6.1.ia64",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-workstation-0:1.3.4-54.el4_6.1.ppc as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:krb5-workstation-0:1.3.4-54.el4_6.1.ppc"
},
"product_reference": "krb5-workstation-0:1.3.4-54.el4_6.1.ppc",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-workstation-0:1.3.4-54.el4_6.1.s390 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:krb5-workstation-0:1.3.4-54.el4_6.1.s390"
},
"product_reference": "krb5-workstation-0:1.3.4-54.el4_6.1.s390",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-workstation-0:1.3.4-54.el4_6.1.s390x as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:krb5-workstation-0:1.3.4-54.el4_6.1.s390x"
},
"product_reference": "krb5-workstation-0:1.3.4-54.el4_6.1.s390x",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-workstation-0:1.3.4-54.el4_6.1.x86_64 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:krb5-workstation-0:1.3.4-54.el4_6.1.x86_64"
},
"product_reference": "krb5-workstation-0:1.3.4-54.el4_6.1.x86_64",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-0:1.3.4-54.el4_6.1.src as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:krb5-0:1.3.4-54.el4_6.1.src"
},
"product_reference": "krb5-0:1.3.4-54.el4_6.1.src",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-debuginfo-0:1.3.4-54.el4_6.1.i386 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:krb5-debuginfo-0:1.3.4-54.el4_6.1.i386"
},
"product_reference": "krb5-debuginfo-0:1.3.4-54.el4_6.1.i386",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-debuginfo-0:1.3.4-54.el4_6.1.ia64 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:krb5-debuginfo-0:1.3.4-54.el4_6.1.ia64"
},
"product_reference": "krb5-debuginfo-0:1.3.4-54.el4_6.1.ia64",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc"
},
"product_reference": "krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc64 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc64"
},
"product_reference": "krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc64",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-debuginfo-0:1.3.4-54.el4_6.1.s390 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:krb5-debuginfo-0:1.3.4-54.el4_6.1.s390"
},
"product_reference": "krb5-debuginfo-0:1.3.4-54.el4_6.1.s390",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-debuginfo-0:1.3.4-54.el4_6.1.s390x as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:krb5-debuginfo-0:1.3.4-54.el4_6.1.s390x"
},
"product_reference": "krb5-debuginfo-0:1.3.4-54.el4_6.1.s390x",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-debuginfo-0:1.3.4-54.el4_6.1.x86_64 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:krb5-debuginfo-0:1.3.4-54.el4_6.1.x86_64"
},
"product_reference": "krb5-debuginfo-0:1.3.4-54.el4_6.1.x86_64",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-devel-0:1.3.4-54.el4_6.1.i386 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:krb5-devel-0:1.3.4-54.el4_6.1.i386"
},
"product_reference": "krb5-devel-0:1.3.4-54.el4_6.1.i386",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-devel-0:1.3.4-54.el4_6.1.ia64 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:krb5-devel-0:1.3.4-54.el4_6.1.ia64"
},
"product_reference": "krb5-devel-0:1.3.4-54.el4_6.1.ia64",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-devel-0:1.3.4-54.el4_6.1.ppc as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:krb5-devel-0:1.3.4-54.el4_6.1.ppc"
},
"product_reference": "krb5-devel-0:1.3.4-54.el4_6.1.ppc",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-devel-0:1.3.4-54.el4_6.1.s390 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:krb5-devel-0:1.3.4-54.el4_6.1.s390"
},
"product_reference": "krb5-devel-0:1.3.4-54.el4_6.1.s390",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-devel-0:1.3.4-54.el4_6.1.s390x as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:krb5-devel-0:1.3.4-54.el4_6.1.s390x"
},
"product_reference": "krb5-devel-0:1.3.4-54.el4_6.1.s390x",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-devel-0:1.3.4-54.el4_6.1.x86_64 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:krb5-devel-0:1.3.4-54.el4_6.1.x86_64"
},
"product_reference": "krb5-devel-0:1.3.4-54.el4_6.1.x86_64",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-libs-0:1.3.4-54.el4_6.1.i386 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:krb5-libs-0:1.3.4-54.el4_6.1.i386"
},
"product_reference": "krb5-libs-0:1.3.4-54.el4_6.1.i386",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-libs-0:1.3.4-54.el4_6.1.ia64 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:krb5-libs-0:1.3.4-54.el4_6.1.ia64"
},
"product_reference": "krb5-libs-0:1.3.4-54.el4_6.1.ia64",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-libs-0:1.3.4-54.el4_6.1.ppc as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:krb5-libs-0:1.3.4-54.el4_6.1.ppc"
},
"product_reference": "krb5-libs-0:1.3.4-54.el4_6.1.ppc",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-libs-0:1.3.4-54.el4_6.1.ppc64 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:krb5-libs-0:1.3.4-54.el4_6.1.ppc64"
},
"product_reference": "krb5-libs-0:1.3.4-54.el4_6.1.ppc64",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-libs-0:1.3.4-54.el4_6.1.s390 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:krb5-libs-0:1.3.4-54.el4_6.1.s390"
},
"product_reference": "krb5-libs-0:1.3.4-54.el4_6.1.s390",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-libs-0:1.3.4-54.el4_6.1.s390x as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:krb5-libs-0:1.3.4-54.el4_6.1.s390x"
},
"product_reference": "krb5-libs-0:1.3.4-54.el4_6.1.s390x",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-libs-0:1.3.4-54.el4_6.1.x86_64 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:krb5-libs-0:1.3.4-54.el4_6.1.x86_64"
},
"product_reference": "krb5-libs-0:1.3.4-54.el4_6.1.x86_64",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-server-0:1.3.4-54.el4_6.1.i386 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:krb5-server-0:1.3.4-54.el4_6.1.i386"
},
"product_reference": "krb5-server-0:1.3.4-54.el4_6.1.i386",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-server-0:1.3.4-54.el4_6.1.ia64 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:krb5-server-0:1.3.4-54.el4_6.1.ia64"
},
"product_reference": "krb5-server-0:1.3.4-54.el4_6.1.ia64",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-server-0:1.3.4-54.el4_6.1.ppc as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:krb5-server-0:1.3.4-54.el4_6.1.ppc"
},
"product_reference": "krb5-server-0:1.3.4-54.el4_6.1.ppc",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-server-0:1.3.4-54.el4_6.1.s390 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:krb5-server-0:1.3.4-54.el4_6.1.s390"
},
"product_reference": "krb5-server-0:1.3.4-54.el4_6.1.s390",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-server-0:1.3.4-54.el4_6.1.s390x as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:krb5-server-0:1.3.4-54.el4_6.1.s390x"
},
"product_reference": "krb5-server-0:1.3.4-54.el4_6.1.s390x",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-server-0:1.3.4-54.el4_6.1.x86_64 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:krb5-server-0:1.3.4-54.el4_6.1.x86_64"
},
"product_reference": "krb5-server-0:1.3.4-54.el4_6.1.x86_64",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-workstation-0:1.3.4-54.el4_6.1.i386 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:krb5-workstation-0:1.3.4-54.el4_6.1.i386"
},
"product_reference": "krb5-workstation-0:1.3.4-54.el4_6.1.i386",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-workstation-0:1.3.4-54.el4_6.1.ia64 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:krb5-workstation-0:1.3.4-54.el4_6.1.ia64"
},
"product_reference": "krb5-workstation-0:1.3.4-54.el4_6.1.ia64",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-workstation-0:1.3.4-54.el4_6.1.ppc as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:krb5-workstation-0:1.3.4-54.el4_6.1.ppc"
},
"product_reference": "krb5-workstation-0:1.3.4-54.el4_6.1.ppc",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-workstation-0:1.3.4-54.el4_6.1.s390 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:krb5-workstation-0:1.3.4-54.el4_6.1.s390"
},
"product_reference": "krb5-workstation-0:1.3.4-54.el4_6.1.s390",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-workstation-0:1.3.4-54.el4_6.1.s390x as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:krb5-workstation-0:1.3.4-54.el4_6.1.s390x"
},
"product_reference": "krb5-workstation-0:1.3.4-54.el4_6.1.s390x",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "krb5-workstation-0:1.3.4-54.el4_6.1.x86_64 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:krb5-workstation-0:1.3.4-54.el4_6.1.x86_64"
},
"product_reference": "krb5-workstation-0:1.3.4-54.el4_6.1.x86_64",
"relates_to_product_reference": "4WS"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2007-5971",
"discovery_date": "2007-11-15T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "415351"
}
],
"notes": [
{
"category": "description",
"text": "Double free vulnerability in the gss_krb5int_make_seal_token_v3 function in lib/gssapi/krb5/k5sealv3.c in MIT Kerberos 5 (krb5) has unknown impact and attack vectors.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "krb5: double free in gssapi lib",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat is aware of this issue and is tracking it via the following bug: https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=CVE-2007-5971\n\nThe Red Hat Product Security has rated this issue as having low security impact, a future update may address this flaw. See https://marc.info/?m=119743235325151",
"title": "Statement"
}
],
"product_status": {
"fixed": [
"4AS:krb5-0:1.3.4-54.el4_6.1.src",
"4AS:krb5-debuginfo-0:1.3.4-54.el4_6.1.i386",
"4AS:krb5-debuginfo-0:1.3.4-54.el4_6.1.ia64",
"4AS:krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc",
"4AS:krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc64",
"4AS:krb5-debuginfo-0:1.3.4-54.el4_6.1.s390",
"4AS:krb5-debuginfo-0:1.3.4-54.el4_6.1.s390x",
"4AS:krb5-debuginfo-0:1.3.4-54.el4_6.1.x86_64",
"4AS:krb5-devel-0:1.3.4-54.el4_6.1.i386",
"4AS:krb5-devel-0:1.3.4-54.el4_6.1.ia64",
"4AS:krb5-devel-0:1.3.4-54.el4_6.1.ppc",
"4AS:krb5-devel-0:1.3.4-54.el4_6.1.s390",
"4AS:krb5-devel-0:1.3.4-54.el4_6.1.s390x",
"4AS:krb5-devel-0:1.3.4-54.el4_6.1.x86_64",
"4AS:krb5-libs-0:1.3.4-54.el4_6.1.i386",
"4AS:krb5-libs-0:1.3.4-54.el4_6.1.ia64",
"4AS:krb5-libs-0:1.3.4-54.el4_6.1.ppc",
"4AS:krb5-libs-0:1.3.4-54.el4_6.1.ppc64",
"4AS:krb5-libs-0:1.3.4-54.el4_6.1.s390",
"4AS:krb5-libs-0:1.3.4-54.el4_6.1.s390x",
"4AS:krb5-libs-0:1.3.4-54.el4_6.1.x86_64",
"4AS:krb5-server-0:1.3.4-54.el4_6.1.i386",
"4AS:krb5-server-0:1.3.4-54.el4_6.1.ia64",
"4AS:krb5-server-0:1.3.4-54.el4_6.1.ppc",
"4AS:krb5-server-0:1.3.4-54.el4_6.1.s390",
"4AS:krb5-server-0:1.3.4-54.el4_6.1.s390x",
"4AS:krb5-server-0:1.3.4-54.el4_6.1.x86_64",
"4AS:krb5-workstation-0:1.3.4-54.el4_6.1.i386",
"4AS:krb5-workstation-0:1.3.4-54.el4_6.1.ia64",
"4AS:krb5-workstation-0:1.3.4-54.el4_6.1.ppc",
"4AS:krb5-workstation-0:1.3.4-54.el4_6.1.s390",
"4AS:krb5-workstation-0:1.3.4-54.el4_6.1.s390x",
"4AS:krb5-workstation-0:1.3.4-54.el4_6.1.x86_64",
"4Desktop:krb5-0:1.3.4-54.el4_6.1.src",
"4Desktop:krb5-debuginfo-0:1.3.4-54.el4_6.1.i386",
"4Desktop:krb5-debuginfo-0:1.3.4-54.el4_6.1.ia64",
"4Desktop:krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc",
"4Desktop:krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc64",
"4Desktop:krb5-debuginfo-0:1.3.4-54.el4_6.1.s390",
"4Desktop:krb5-debuginfo-0:1.3.4-54.el4_6.1.s390x",
"4Desktop:krb5-debuginfo-0:1.3.4-54.el4_6.1.x86_64",
"4Desktop:krb5-devel-0:1.3.4-54.el4_6.1.i386",
"4Desktop:krb5-devel-0:1.3.4-54.el4_6.1.ia64",
"4Desktop:krb5-devel-0:1.3.4-54.el4_6.1.ppc",
"4Desktop:krb5-devel-0:1.3.4-54.el4_6.1.s390",
"4Desktop:krb5-devel-0:1.3.4-54.el4_6.1.s390x",
"4Desktop:krb5-devel-0:1.3.4-54.el4_6.1.x86_64",
"4Desktop:krb5-libs-0:1.3.4-54.el4_6.1.i386",
"4Desktop:krb5-libs-0:1.3.4-54.el4_6.1.ia64",
"4Desktop:krb5-libs-0:1.3.4-54.el4_6.1.ppc",
"4Desktop:krb5-libs-0:1.3.4-54.el4_6.1.ppc64",
"4Desktop:krb5-libs-0:1.3.4-54.el4_6.1.s390",
"4Desktop:krb5-libs-0:1.3.4-54.el4_6.1.s390x",
"4Desktop:krb5-libs-0:1.3.4-54.el4_6.1.x86_64",
"4Desktop:krb5-server-0:1.3.4-54.el4_6.1.i386",
"4Desktop:krb5-server-0:1.3.4-54.el4_6.1.ia64",
"4Desktop:krb5-server-0:1.3.4-54.el4_6.1.ppc",
"4Desktop:krb5-server-0:1.3.4-54.el4_6.1.s390",
"4Desktop:krb5-server-0:1.3.4-54.el4_6.1.s390x",
"4Desktop:krb5-server-0:1.3.4-54.el4_6.1.x86_64",
"4Desktop:krb5-workstation-0:1.3.4-54.el4_6.1.i386",
"4Desktop:krb5-workstation-0:1.3.4-54.el4_6.1.ia64",
"4Desktop:krb5-workstation-0:1.3.4-54.el4_6.1.ppc",
"4Desktop:krb5-workstation-0:1.3.4-54.el4_6.1.s390",
"4Desktop:krb5-workstation-0:1.3.4-54.el4_6.1.s390x",
"4Desktop:krb5-workstation-0:1.3.4-54.el4_6.1.x86_64",
"4ES:krb5-0:1.3.4-54.el4_6.1.src",
"4ES:krb5-debuginfo-0:1.3.4-54.el4_6.1.i386",
"4ES:krb5-debuginfo-0:1.3.4-54.el4_6.1.ia64",
"4ES:krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc",
"4ES:krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc64",
"4ES:krb5-debuginfo-0:1.3.4-54.el4_6.1.s390",
"4ES:krb5-debuginfo-0:1.3.4-54.el4_6.1.s390x",
"4ES:krb5-debuginfo-0:1.3.4-54.el4_6.1.x86_64",
"4ES:krb5-devel-0:1.3.4-54.el4_6.1.i386",
"4ES:krb5-devel-0:1.3.4-54.el4_6.1.ia64",
"4ES:krb5-devel-0:1.3.4-54.el4_6.1.ppc",
"4ES:krb5-devel-0:1.3.4-54.el4_6.1.s390",
"4ES:krb5-devel-0:1.3.4-54.el4_6.1.s390x",
"4ES:krb5-devel-0:1.3.4-54.el4_6.1.x86_64",
"4ES:krb5-libs-0:1.3.4-54.el4_6.1.i386",
"4ES:krb5-libs-0:1.3.4-54.el4_6.1.ia64",
"4ES:krb5-libs-0:1.3.4-54.el4_6.1.ppc",
"4ES:krb5-libs-0:1.3.4-54.el4_6.1.ppc64",
"4ES:krb5-libs-0:1.3.4-54.el4_6.1.s390",
"4ES:krb5-libs-0:1.3.4-54.el4_6.1.s390x",
"4ES:krb5-libs-0:1.3.4-54.el4_6.1.x86_64",
"4ES:krb5-server-0:1.3.4-54.el4_6.1.i386",
"4ES:krb5-server-0:1.3.4-54.el4_6.1.ia64",
"4ES:krb5-server-0:1.3.4-54.el4_6.1.ppc",
"4ES:krb5-server-0:1.3.4-54.el4_6.1.s390",
"4ES:krb5-server-0:1.3.4-54.el4_6.1.s390x",
"4ES:krb5-server-0:1.3.4-54.el4_6.1.x86_64",
"4ES:krb5-workstation-0:1.3.4-54.el4_6.1.i386",
"4ES:krb5-workstation-0:1.3.4-54.el4_6.1.ia64",
"4ES:krb5-workstation-0:1.3.4-54.el4_6.1.ppc",
"4ES:krb5-workstation-0:1.3.4-54.el4_6.1.s390",
"4ES:krb5-workstation-0:1.3.4-54.el4_6.1.s390x",
"4ES:krb5-workstation-0:1.3.4-54.el4_6.1.x86_64",
"4WS:krb5-0:1.3.4-54.el4_6.1.src",
"4WS:krb5-debuginfo-0:1.3.4-54.el4_6.1.i386",
"4WS:krb5-debuginfo-0:1.3.4-54.el4_6.1.ia64",
"4WS:krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc",
"4WS:krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc64",
"4WS:krb5-debuginfo-0:1.3.4-54.el4_6.1.s390",
"4WS:krb5-debuginfo-0:1.3.4-54.el4_6.1.s390x",
"4WS:krb5-debuginfo-0:1.3.4-54.el4_6.1.x86_64",
"4WS:krb5-devel-0:1.3.4-54.el4_6.1.i386",
"4WS:krb5-devel-0:1.3.4-54.el4_6.1.ia64",
"4WS:krb5-devel-0:1.3.4-54.el4_6.1.ppc",
"4WS:krb5-devel-0:1.3.4-54.el4_6.1.s390",
"4WS:krb5-devel-0:1.3.4-54.el4_6.1.s390x",
"4WS:krb5-devel-0:1.3.4-54.el4_6.1.x86_64",
"4WS:krb5-libs-0:1.3.4-54.el4_6.1.i386",
"4WS:krb5-libs-0:1.3.4-54.el4_6.1.ia64",
"4WS:krb5-libs-0:1.3.4-54.el4_6.1.ppc",
"4WS:krb5-libs-0:1.3.4-54.el4_6.1.ppc64",
"4WS:krb5-libs-0:1.3.4-54.el4_6.1.s390",
"4WS:krb5-libs-0:1.3.4-54.el4_6.1.s390x",
"4WS:krb5-libs-0:1.3.4-54.el4_6.1.x86_64",
"4WS:krb5-server-0:1.3.4-54.el4_6.1.i386",
"4WS:krb5-server-0:1.3.4-54.el4_6.1.ia64",
"4WS:krb5-server-0:1.3.4-54.el4_6.1.ppc",
"4WS:krb5-server-0:1.3.4-54.el4_6.1.s390",
"4WS:krb5-server-0:1.3.4-54.el4_6.1.s390x",
"4WS:krb5-server-0:1.3.4-54.el4_6.1.x86_64",
"4WS:krb5-workstation-0:1.3.4-54.el4_6.1.i386",
"4WS:krb5-workstation-0:1.3.4-54.el4_6.1.ia64",
"4WS:krb5-workstation-0:1.3.4-54.el4_6.1.ppc",
"4WS:krb5-workstation-0:1.3.4-54.el4_6.1.s390",
"4WS:krb5-workstation-0:1.3.4-54.el4_6.1.s390x",
"4WS:krb5-workstation-0:1.3.4-54.el4_6.1.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2007-5971"
},
{
"category": "external",
"summary": "RHBZ#415351",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=415351"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2007-5971",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-5971"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2007-5971",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2007-5971"
}
],
"release_date": "2007-11-14T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2008-03-18T18:35:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/FAQ_58_10188",
"product_ids": [
"4AS:krb5-0:1.3.4-54.el4_6.1.src",
"4AS:krb5-debuginfo-0:1.3.4-54.el4_6.1.i386",
"4AS:krb5-debuginfo-0:1.3.4-54.el4_6.1.ia64",
"4AS:krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc",
"4AS:krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc64",
"4AS:krb5-debuginfo-0:1.3.4-54.el4_6.1.s390",
"4AS:krb5-debuginfo-0:1.3.4-54.el4_6.1.s390x",
"4AS:krb5-debuginfo-0:1.3.4-54.el4_6.1.x86_64",
"4AS:krb5-devel-0:1.3.4-54.el4_6.1.i386",
"4AS:krb5-devel-0:1.3.4-54.el4_6.1.ia64",
"4AS:krb5-devel-0:1.3.4-54.el4_6.1.ppc",
"4AS:krb5-devel-0:1.3.4-54.el4_6.1.s390",
"4AS:krb5-devel-0:1.3.4-54.el4_6.1.s390x",
"4AS:krb5-devel-0:1.3.4-54.el4_6.1.x86_64",
"4AS:krb5-libs-0:1.3.4-54.el4_6.1.i386",
"4AS:krb5-libs-0:1.3.4-54.el4_6.1.ia64",
"4AS:krb5-libs-0:1.3.4-54.el4_6.1.ppc",
"4AS:krb5-libs-0:1.3.4-54.el4_6.1.ppc64",
"4AS:krb5-libs-0:1.3.4-54.el4_6.1.s390",
"4AS:krb5-libs-0:1.3.4-54.el4_6.1.s390x",
"4AS:krb5-libs-0:1.3.4-54.el4_6.1.x86_64",
"4AS:krb5-server-0:1.3.4-54.el4_6.1.i386",
"4AS:krb5-server-0:1.3.4-54.el4_6.1.ia64",
"4AS:krb5-server-0:1.3.4-54.el4_6.1.ppc",
"4AS:krb5-server-0:1.3.4-54.el4_6.1.s390",
"4AS:krb5-server-0:1.3.4-54.el4_6.1.s390x",
"4AS:krb5-server-0:1.3.4-54.el4_6.1.x86_64",
"4AS:krb5-workstation-0:1.3.4-54.el4_6.1.i386",
"4AS:krb5-workstation-0:1.3.4-54.el4_6.1.ia64",
"4AS:krb5-workstation-0:1.3.4-54.el4_6.1.ppc",
"4AS:krb5-workstation-0:1.3.4-54.el4_6.1.s390",
"4AS:krb5-workstation-0:1.3.4-54.el4_6.1.s390x",
"4AS:krb5-workstation-0:1.3.4-54.el4_6.1.x86_64",
"4Desktop:krb5-0:1.3.4-54.el4_6.1.src",
"4Desktop:krb5-debuginfo-0:1.3.4-54.el4_6.1.i386",
"4Desktop:krb5-debuginfo-0:1.3.4-54.el4_6.1.ia64",
"4Desktop:krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc",
"4Desktop:krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc64",
"4Desktop:krb5-debuginfo-0:1.3.4-54.el4_6.1.s390",
"4Desktop:krb5-debuginfo-0:1.3.4-54.el4_6.1.s390x",
"4Desktop:krb5-debuginfo-0:1.3.4-54.el4_6.1.x86_64",
"4Desktop:krb5-devel-0:1.3.4-54.el4_6.1.i386",
"4Desktop:krb5-devel-0:1.3.4-54.el4_6.1.ia64",
"4Desktop:krb5-devel-0:1.3.4-54.el4_6.1.ppc",
"4Desktop:krb5-devel-0:1.3.4-54.el4_6.1.s390",
"4Desktop:krb5-devel-0:1.3.4-54.el4_6.1.s390x",
"4Desktop:krb5-devel-0:1.3.4-54.el4_6.1.x86_64",
"4Desktop:krb5-libs-0:1.3.4-54.el4_6.1.i386",
"4Desktop:krb5-libs-0:1.3.4-54.el4_6.1.ia64",
"4Desktop:krb5-libs-0:1.3.4-54.el4_6.1.ppc",
"4Desktop:krb5-libs-0:1.3.4-54.el4_6.1.ppc64",
"4Desktop:krb5-libs-0:1.3.4-54.el4_6.1.s390",
"4Desktop:krb5-libs-0:1.3.4-54.el4_6.1.s390x",
"4Desktop:krb5-libs-0:1.3.4-54.el4_6.1.x86_64",
"4Desktop:krb5-server-0:1.3.4-54.el4_6.1.i386",
"4Desktop:krb5-server-0:1.3.4-54.el4_6.1.ia64",
"4Desktop:krb5-server-0:1.3.4-54.el4_6.1.ppc",
"4Desktop:krb5-server-0:1.3.4-54.el4_6.1.s390",
"4Desktop:krb5-server-0:1.3.4-54.el4_6.1.s390x",
"4Desktop:krb5-server-0:1.3.4-54.el4_6.1.x86_64",
"4Desktop:krb5-workstation-0:1.3.4-54.el4_6.1.i386",
"4Desktop:krb5-workstation-0:1.3.4-54.el4_6.1.ia64",
"4Desktop:krb5-workstation-0:1.3.4-54.el4_6.1.ppc",
"4Desktop:krb5-workstation-0:1.3.4-54.el4_6.1.s390",
"4Desktop:krb5-workstation-0:1.3.4-54.el4_6.1.s390x",
"4Desktop:krb5-workstation-0:1.3.4-54.el4_6.1.x86_64",
"4ES:krb5-0:1.3.4-54.el4_6.1.src",
"4ES:krb5-debuginfo-0:1.3.4-54.el4_6.1.i386",
"4ES:krb5-debuginfo-0:1.3.4-54.el4_6.1.ia64",
"4ES:krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc",
"4ES:krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc64",
"4ES:krb5-debuginfo-0:1.3.4-54.el4_6.1.s390",
"4ES:krb5-debuginfo-0:1.3.4-54.el4_6.1.s390x",
"4ES:krb5-debuginfo-0:1.3.4-54.el4_6.1.x86_64",
"4ES:krb5-devel-0:1.3.4-54.el4_6.1.i386",
"4ES:krb5-devel-0:1.3.4-54.el4_6.1.ia64",
"4ES:krb5-devel-0:1.3.4-54.el4_6.1.ppc",
"4ES:krb5-devel-0:1.3.4-54.el4_6.1.s390",
"4ES:krb5-devel-0:1.3.4-54.el4_6.1.s390x",
"4ES:krb5-devel-0:1.3.4-54.el4_6.1.x86_64",
"4ES:krb5-libs-0:1.3.4-54.el4_6.1.i386",
"4ES:krb5-libs-0:1.3.4-54.el4_6.1.ia64",
"4ES:krb5-libs-0:1.3.4-54.el4_6.1.ppc",
"4ES:krb5-libs-0:1.3.4-54.el4_6.1.ppc64",
"4ES:krb5-libs-0:1.3.4-54.el4_6.1.s390",
"4ES:krb5-libs-0:1.3.4-54.el4_6.1.s390x",
"4ES:krb5-libs-0:1.3.4-54.el4_6.1.x86_64",
"4ES:krb5-server-0:1.3.4-54.el4_6.1.i386",
"4ES:krb5-server-0:1.3.4-54.el4_6.1.ia64",
"4ES:krb5-server-0:1.3.4-54.el4_6.1.ppc",
"4ES:krb5-server-0:1.3.4-54.el4_6.1.s390",
"4ES:krb5-server-0:1.3.4-54.el4_6.1.s390x",
"4ES:krb5-server-0:1.3.4-54.el4_6.1.x86_64",
"4ES:krb5-workstation-0:1.3.4-54.el4_6.1.i386",
"4ES:krb5-workstation-0:1.3.4-54.el4_6.1.ia64",
"4ES:krb5-workstation-0:1.3.4-54.el4_6.1.ppc",
"4ES:krb5-workstation-0:1.3.4-54.el4_6.1.s390",
"4ES:krb5-workstation-0:1.3.4-54.el4_6.1.s390x",
"4ES:krb5-workstation-0:1.3.4-54.el4_6.1.x86_64",
"4WS:krb5-0:1.3.4-54.el4_6.1.src",
"4WS:krb5-debuginfo-0:1.3.4-54.el4_6.1.i386",
"4WS:krb5-debuginfo-0:1.3.4-54.el4_6.1.ia64",
"4WS:krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc",
"4WS:krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc64",
"4WS:krb5-debuginfo-0:1.3.4-54.el4_6.1.s390",
"4WS:krb5-debuginfo-0:1.3.4-54.el4_6.1.s390x",
"4WS:krb5-debuginfo-0:1.3.4-54.el4_6.1.x86_64",
"4WS:krb5-devel-0:1.3.4-54.el4_6.1.i386",
"4WS:krb5-devel-0:1.3.4-54.el4_6.1.ia64",
"4WS:krb5-devel-0:1.3.4-54.el4_6.1.ppc",
"4WS:krb5-devel-0:1.3.4-54.el4_6.1.s390",
"4WS:krb5-devel-0:1.3.4-54.el4_6.1.s390x",
"4WS:krb5-devel-0:1.3.4-54.el4_6.1.x86_64",
"4WS:krb5-libs-0:1.3.4-54.el4_6.1.i386",
"4WS:krb5-libs-0:1.3.4-54.el4_6.1.ia64",
"4WS:krb5-libs-0:1.3.4-54.el4_6.1.ppc",
"4WS:krb5-libs-0:1.3.4-54.el4_6.1.ppc64",
"4WS:krb5-libs-0:1.3.4-54.el4_6.1.s390",
"4WS:krb5-libs-0:1.3.4-54.el4_6.1.s390x",
"4WS:krb5-libs-0:1.3.4-54.el4_6.1.x86_64",
"4WS:krb5-server-0:1.3.4-54.el4_6.1.i386",
"4WS:krb5-server-0:1.3.4-54.el4_6.1.ia64",
"4WS:krb5-server-0:1.3.4-54.el4_6.1.ppc",
"4WS:krb5-server-0:1.3.4-54.el4_6.1.s390",
"4WS:krb5-server-0:1.3.4-54.el4_6.1.s390x",
"4WS:krb5-server-0:1.3.4-54.el4_6.1.x86_64",
"4WS:krb5-workstation-0:1.3.4-54.el4_6.1.i386",
"4WS:krb5-workstation-0:1.3.4-54.el4_6.1.ia64",
"4WS:krb5-workstation-0:1.3.4-54.el4_6.1.ppc",
"4WS:krb5-workstation-0:1.3.4-54.el4_6.1.s390",
"4WS:krb5-workstation-0:1.3.4-54.el4_6.1.s390x",
"4WS:krb5-workstation-0:1.3.4-54.el4_6.1.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2008:0180"
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "krb5: double free in gssapi lib"
},
{
"acknowledgments": [
{
"names": [
"MIT"
]
}
],
"cve": "CVE-2008-0062",
"discovery_date": "2008-02-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "432620"
}
],
"notes": [
{
"category": "description",
"text": "KDC in MIT Kerberos 5 (krb5kdc) does not set a global variable for some krb4 message types, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted messages that trigger a NULL pointer dereference or double-free.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "krb5: uninitialized pointer use in krb5kdc",
"title": "Vulnerability summary"
}
],
"product_status": {
"fixed": [
"4AS:krb5-0:1.3.4-54.el4_6.1.src",
"4AS:krb5-debuginfo-0:1.3.4-54.el4_6.1.i386",
"4AS:krb5-debuginfo-0:1.3.4-54.el4_6.1.ia64",
"4AS:krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc",
"4AS:krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc64",
"4AS:krb5-debuginfo-0:1.3.4-54.el4_6.1.s390",
"4AS:krb5-debuginfo-0:1.3.4-54.el4_6.1.s390x",
"4AS:krb5-debuginfo-0:1.3.4-54.el4_6.1.x86_64",
"4AS:krb5-devel-0:1.3.4-54.el4_6.1.i386",
"4AS:krb5-devel-0:1.3.4-54.el4_6.1.ia64",
"4AS:krb5-devel-0:1.3.4-54.el4_6.1.ppc",
"4AS:krb5-devel-0:1.3.4-54.el4_6.1.s390",
"4AS:krb5-devel-0:1.3.4-54.el4_6.1.s390x",
"4AS:krb5-devel-0:1.3.4-54.el4_6.1.x86_64",
"4AS:krb5-libs-0:1.3.4-54.el4_6.1.i386",
"4AS:krb5-libs-0:1.3.4-54.el4_6.1.ia64",
"4AS:krb5-libs-0:1.3.4-54.el4_6.1.ppc",
"4AS:krb5-libs-0:1.3.4-54.el4_6.1.ppc64",
"4AS:krb5-libs-0:1.3.4-54.el4_6.1.s390",
"4AS:krb5-libs-0:1.3.4-54.el4_6.1.s390x",
"4AS:krb5-libs-0:1.3.4-54.el4_6.1.x86_64",
"4AS:krb5-server-0:1.3.4-54.el4_6.1.i386",
"4AS:krb5-server-0:1.3.4-54.el4_6.1.ia64",
"4AS:krb5-server-0:1.3.4-54.el4_6.1.ppc",
"4AS:krb5-server-0:1.3.4-54.el4_6.1.s390",
"4AS:krb5-server-0:1.3.4-54.el4_6.1.s390x",
"4AS:krb5-server-0:1.3.4-54.el4_6.1.x86_64",
"4AS:krb5-workstation-0:1.3.4-54.el4_6.1.i386",
"4AS:krb5-workstation-0:1.3.4-54.el4_6.1.ia64",
"4AS:krb5-workstation-0:1.3.4-54.el4_6.1.ppc",
"4AS:krb5-workstation-0:1.3.4-54.el4_6.1.s390",
"4AS:krb5-workstation-0:1.3.4-54.el4_6.1.s390x",
"4AS:krb5-workstation-0:1.3.4-54.el4_6.1.x86_64",
"4Desktop:krb5-0:1.3.4-54.el4_6.1.src",
"4Desktop:krb5-debuginfo-0:1.3.4-54.el4_6.1.i386",
"4Desktop:krb5-debuginfo-0:1.3.4-54.el4_6.1.ia64",
"4Desktop:krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc",
"4Desktop:krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc64",
"4Desktop:krb5-debuginfo-0:1.3.4-54.el4_6.1.s390",
"4Desktop:krb5-debuginfo-0:1.3.4-54.el4_6.1.s390x",
"4Desktop:krb5-debuginfo-0:1.3.4-54.el4_6.1.x86_64",
"4Desktop:krb5-devel-0:1.3.4-54.el4_6.1.i386",
"4Desktop:krb5-devel-0:1.3.4-54.el4_6.1.ia64",
"4Desktop:krb5-devel-0:1.3.4-54.el4_6.1.ppc",
"4Desktop:krb5-devel-0:1.3.4-54.el4_6.1.s390",
"4Desktop:krb5-devel-0:1.3.4-54.el4_6.1.s390x",
"4Desktop:krb5-devel-0:1.3.4-54.el4_6.1.x86_64",
"4Desktop:krb5-libs-0:1.3.4-54.el4_6.1.i386",
"4Desktop:krb5-libs-0:1.3.4-54.el4_6.1.ia64",
"4Desktop:krb5-libs-0:1.3.4-54.el4_6.1.ppc",
"4Desktop:krb5-libs-0:1.3.4-54.el4_6.1.ppc64",
"4Desktop:krb5-libs-0:1.3.4-54.el4_6.1.s390",
"4Desktop:krb5-libs-0:1.3.4-54.el4_6.1.s390x",
"4Desktop:krb5-libs-0:1.3.4-54.el4_6.1.x86_64",
"4Desktop:krb5-server-0:1.3.4-54.el4_6.1.i386",
"4Desktop:krb5-server-0:1.3.4-54.el4_6.1.ia64",
"4Desktop:krb5-server-0:1.3.4-54.el4_6.1.ppc",
"4Desktop:krb5-server-0:1.3.4-54.el4_6.1.s390",
"4Desktop:krb5-server-0:1.3.4-54.el4_6.1.s390x",
"4Desktop:krb5-server-0:1.3.4-54.el4_6.1.x86_64",
"4Desktop:krb5-workstation-0:1.3.4-54.el4_6.1.i386",
"4Desktop:krb5-workstation-0:1.3.4-54.el4_6.1.ia64",
"4Desktop:krb5-workstation-0:1.3.4-54.el4_6.1.ppc",
"4Desktop:krb5-workstation-0:1.3.4-54.el4_6.1.s390",
"4Desktop:krb5-workstation-0:1.3.4-54.el4_6.1.s390x",
"4Desktop:krb5-workstation-0:1.3.4-54.el4_6.1.x86_64",
"4ES:krb5-0:1.3.4-54.el4_6.1.src",
"4ES:krb5-debuginfo-0:1.3.4-54.el4_6.1.i386",
"4ES:krb5-debuginfo-0:1.3.4-54.el4_6.1.ia64",
"4ES:krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc",
"4ES:krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc64",
"4ES:krb5-debuginfo-0:1.3.4-54.el4_6.1.s390",
"4ES:krb5-debuginfo-0:1.3.4-54.el4_6.1.s390x",
"4ES:krb5-debuginfo-0:1.3.4-54.el4_6.1.x86_64",
"4ES:krb5-devel-0:1.3.4-54.el4_6.1.i386",
"4ES:krb5-devel-0:1.3.4-54.el4_6.1.ia64",
"4ES:krb5-devel-0:1.3.4-54.el4_6.1.ppc",
"4ES:krb5-devel-0:1.3.4-54.el4_6.1.s390",
"4ES:krb5-devel-0:1.3.4-54.el4_6.1.s390x",
"4ES:krb5-devel-0:1.3.4-54.el4_6.1.x86_64",
"4ES:krb5-libs-0:1.3.4-54.el4_6.1.i386",
"4ES:krb5-libs-0:1.3.4-54.el4_6.1.ia64",
"4ES:krb5-libs-0:1.3.4-54.el4_6.1.ppc",
"4ES:krb5-libs-0:1.3.4-54.el4_6.1.ppc64",
"4ES:krb5-libs-0:1.3.4-54.el4_6.1.s390",
"4ES:krb5-libs-0:1.3.4-54.el4_6.1.s390x",
"4ES:krb5-libs-0:1.3.4-54.el4_6.1.x86_64",
"4ES:krb5-server-0:1.3.4-54.el4_6.1.i386",
"4ES:krb5-server-0:1.3.4-54.el4_6.1.ia64",
"4ES:krb5-server-0:1.3.4-54.el4_6.1.ppc",
"4ES:krb5-server-0:1.3.4-54.el4_6.1.s390",
"4ES:krb5-server-0:1.3.4-54.el4_6.1.s390x",
"4ES:krb5-server-0:1.3.4-54.el4_6.1.x86_64",
"4ES:krb5-workstation-0:1.3.4-54.el4_6.1.i386",
"4ES:krb5-workstation-0:1.3.4-54.el4_6.1.ia64",
"4ES:krb5-workstation-0:1.3.4-54.el4_6.1.ppc",
"4ES:krb5-workstation-0:1.3.4-54.el4_6.1.s390",
"4ES:krb5-workstation-0:1.3.4-54.el4_6.1.s390x",
"4ES:krb5-workstation-0:1.3.4-54.el4_6.1.x86_64",
"4WS:krb5-0:1.3.4-54.el4_6.1.src",
"4WS:krb5-debuginfo-0:1.3.4-54.el4_6.1.i386",
"4WS:krb5-debuginfo-0:1.3.4-54.el4_6.1.ia64",
"4WS:krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc",
"4WS:krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc64",
"4WS:krb5-debuginfo-0:1.3.4-54.el4_6.1.s390",
"4WS:krb5-debuginfo-0:1.3.4-54.el4_6.1.s390x",
"4WS:krb5-debuginfo-0:1.3.4-54.el4_6.1.x86_64",
"4WS:krb5-devel-0:1.3.4-54.el4_6.1.i386",
"4WS:krb5-devel-0:1.3.4-54.el4_6.1.ia64",
"4WS:krb5-devel-0:1.3.4-54.el4_6.1.ppc",
"4WS:krb5-devel-0:1.3.4-54.el4_6.1.s390",
"4WS:krb5-devel-0:1.3.4-54.el4_6.1.s390x",
"4WS:krb5-devel-0:1.3.4-54.el4_6.1.x86_64",
"4WS:krb5-libs-0:1.3.4-54.el4_6.1.i386",
"4WS:krb5-libs-0:1.3.4-54.el4_6.1.ia64",
"4WS:krb5-libs-0:1.3.4-54.el4_6.1.ppc",
"4WS:krb5-libs-0:1.3.4-54.el4_6.1.ppc64",
"4WS:krb5-libs-0:1.3.4-54.el4_6.1.s390",
"4WS:krb5-libs-0:1.3.4-54.el4_6.1.s390x",
"4WS:krb5-libs-0:1.3.4-54.el4_6.1.x86_64",
"4WS:krb5-server-0:1.3.4-54.el4_6.1.i386",
"4WS:krb5-server-0:1.3.4-54.el4_6.1.ia64",
"4WS:krb5-server-0:1.3.4-54.el4_6.1.ppc",
"4WS:krb5-server-0:1.3.4-54.el4_6.1.s390",
"4WS:krb5-server-0:1.3.4-54.el4_6.1.s390x",
"4WS:krb5-server-0:1.3.4-54.el4_6.1.x86_64",
"4WS:krb5-workstation-0:1.3.4-54.el4_6.1.i386",
"4WS:krb5-workstation-0:1.3.4-54.el4_6.1.ia64",
"4WS:krb5-workstation-0:1.3.4-54.el4_6.1.ppc",
"4WS:krb5-workstation-0:1.3.4-54.el4_6.1.s390",
"4WS:krb5-workstation-0:1.3.4-54.el4_6.1.s390x",
"4WS:krb5-workstation-0:1.3.4-54.el4_6.1.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2008-0062"
},
{
"category": "external",
"summary": "RHBZ#432620",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=432620"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2008-0062",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-0062"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2008-0062",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2008-0062"
}
],
"release_date": "2008-03-18T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2008-03-18T18:35:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/FAQ_58_10188",
"product_ids": [
"4AS:krb5-0:1.3.4-54.el4_6.1.src",
"4AS:krb5-debuginfo-0:1.3.4-54.el4_6.1.i386",
"4AS:krb5-debuginfo-0:1.3.4-54.el4_6.1.ia64",
"4AS:krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc",
"4AS:krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc64",
"4AS:krb5-debuginfo-0:1.3.4-54.el4_6.1.s390",
"4AS:krb5-debuginfo-0:1.3.4-54.el4_6.1.s390x",
"4AS:krb5-debuginfo-0:1.3.4-54.el4_6.1.x86_64",
"4AS:krb5-devel-0:1.3.4-54.el4_6.1.i386",
"4AS:krb5-devel-0:1.3.4-54.el4_6.1.ia64",
"4AS:krb5-devel-0:1.3.4-54.el4_6.1.ppc",
"4AS:krb5-devel-0:1.3.4-54.el4_6.1.s390",
"4AS:krb5-devel-0:1.3.4-54.el4_6.1.s390x",
"4AS:krb5-devel-0:1.3.4-54.el4_6.1.x86_64",
"4AS:krb5-libs-0:1.3.4-54.el4_6.1.i386",
"4AS:krb5-libs-0:1.3.4-54.el4_6.1.ia64",
"4AS:krb5-libs-0:1.3.4-54.el4_6.1.ppc",
"4AS:krb5-libs-0:1.3.4-54.el4_6.1.ppc64",
"4AS:krb5-libs-0:1.3.4-54.el4_6.1.s390",
"4AS:krb5-libs-0:1.3.4-54.el4_6.1.s390x",
"4AS:krb5-libs-0:1.3.4-54.el4_6.1.x86_64",
"4AS:krb5-server-0:1.3.4-54.el4_6.1.i386",
"4AS:krb5-server-0:1.3.4-54.el4_6.1.ia64",
"4AS:krb5-server-0:1.3.4-54.el4_6.1.ppc",
"4AS:krb5-server-0:1.3.4-54.el4_6.1.s390",
"4AS:krb5-server-0:1.3.4-54.el4_6.1.s390x",
"4AS:krb5-server-0:1.3.4-54.el4_6.1.x86_64",
"4AS:krb5-workstation-0:1.3.4-54.el4_6.1.i386",
"4AS:krb5-workstation-0:1.3.4-54.el4_6.1.ia64",
"4AS:krb5-workstation-0:1.3.4-54.el4_6.1.ppc",
"4AS:krb5-workstation-0:1.3.4-54.el4_6.1.s390",
"4AS:krb5-workstation-0:1.3.4-54.el4_6.1.s390x",
"4AS:krb5-workstation-0:1.3.4-54.el4_6.1.x86_64",
"4Desktop:krb5-0:1.3.4-54.el4_6.1.src",
"4Desktop:krb5-debuginfo-0:1.3.4-54.el4_6.1.i386",
"4Desktop:krb5-debuginfo-0:1.3.4-54.el4_6.1.ia64",
"4Desktop:krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc",
"4Desktop:krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc64",
"4Desktop:krb5-debuginfo-0:1.3.4-54.el4_6.1.s390",
"4Desktop:krb5-debuginfo-0:1.3.4-54.el4_6.1.s390x",
"4Desktop:krb5-debuginfo-0:1.3.4-54.el4_6.1.x86_64",
"4Desktop:krb5-devel-0:1.3.4-54.el4_6.1.i386",
"4Desktop:krb5-devel-0:1.3.4-54.el4_6.1.ia64",
"4Desktop:krb5-devel-0:1.3.4-54.el4_6.1.ppc",
"4Desktop:krb5-devel-0:1.3.4-54.el4_6.1.s390",
"4Desktop:krb5-devel-0:1.3.4-54.el4_6.1.s390x",
"4Desktop:krb5-devel-0:1.3.4-54.el4_6.1.x86_64",
"4Desktop:krb5-libs-0:1.3.4-54.el4_6.1.i386",
"4Desktop:krb5-libs-0:1.3.4-54.el4_6.1.ia64",
"4Desktop:krb5-libs-0:1.3.4-54.el4_6.1.ppc",
"4Desktop:krb5-libs-0:1.3.4-54.el4_6.1.ppc64",
"4Desktop:krb5-libs-0:1.3.4-54.el4_6.1.s390",
"4Desktop:krb5-libs-0:1.3.4-54.el4_6.1.s390x",
"4Desktop:krb5-libs-0:1.3.4-54.el4_6.1.x86_64",
"4Desktop:krb5-server-0:1.3.4-54.el4_6.1.i386",
"4Desktop:krb5-server-0:1.3.4-54.el4_6.1.ia64",
"4Desktop:krb5-server-0:1.3.4-54.el4_6.1.ppc",
"4Desktop:krb5-server-0:1.3.4-54.el4_6.1.s390",
"4Desktop:krb5-server-0:1.3.4-54.el4_6.1.s390x",
"4Desktop:krb5-server-0:1.3.4-54.el4_6.1.x86_64",
"4Desktop:krb5-workstation-0:1.3.4-54.el4_6.1.i386",
"4Desktop:krb5-workstation-0:1.3.4-54.el4_6.1.ia64",
"4Desktop:krb5-workstation-0:1.3.4-54.el4_6.1.ppc",
"4Desktop:krb5-workstation-0:1.3.4-54.el4_6.1.s390",
"4Desktop:krb5-workstation-0:1.3.4-54.el4_6.1.s390x",
"4Desktop:krb5-workstation-0:1.3.4-54.el4_6.1.x86_64",
"4ES:krb5-0:1.3.4-54.el4_6.1.src",
"4ES:krb5-debuginfo-0:1.3.4-54.el4_6.1.i386",
"4ES:krb5-debuginfo-0:1.3.4-54.el4_6.1.ia64",
"4ES:krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc",
"4ES:krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc64",
"4ES:krb5-debuginfo-0:1.3.4-54.el4_6.1.s390",
"4ES:krb5-debuginfo-0:1.3.4-54.el4_6.1.s390x",
"4ES:krb5-debuginfo-0:1.3.4-54.el4_6.1.x86_64",
"4ES:krb5-devel-0:1.3.4-54.el4_6.1.i386",
"4ES:krb5-devel-0:1.3.4-54.el4_6.1.ia64",
"4ES:krb5-devel-0:1.3.4-54.el4_6.1.ppc",
"4ES:krb5-devel-0:1.3.4-54.el4_6.1.s390",
"4ES:krb5-devel-0:1.3.4-54.el4_6.1.s390x",
"4ES:krb5-devel-0:1.3.4-54.el4_6.1.x86_64",
"4ES:krb5-libs-0:1.3.4-54.el4_6.1.i386",
"4ES:krb5-libs-0:1.3.4-54.el4_6.1.ia64",
"4ES:krb5-libs-0:1.3.4-54.el4_6.1.ppc",
"4ES:krb5-libs-0:1.3.4-54.el4_6.1.ppc64",
"4ES:krb5-libs-0:1.3.4-54.el4_6.1.s390",
"4ES:krb5-libs-0:1.3.4-54.el4_6.1.s390x",
"4ES:krb5-libs-0:1.3.4-54.el4_6.1.x86_64",
"4ES:krb5-server-0:1.3.4-54.el4_6.1.i386",
"4ES:krb5-server-0:1.3.4-54.el4_6.1.ia64",
"4ES:krb5-server-0:1.3.4-54.el4_6.1.ppc",
"4ES:krb5-server-0:1.3.4-54.el4_6.1.s390",
"4ES:krb5-server-0:1.3.4-54.el4_6.1.s390x",
"4ES:krb5-server-0:1.3.4-54.el4_6.1.x86_64",
"4ES:krb5-workstation-0:1.3.4-54.el4_6.1.i386",
"4ES:krb5-workstation-0:1.3.4-54.el4_6.1.ia64",
"4ES:krb5-workstation-0:1.3.4-54.el4_6.1.ppc",
"4ES:krb5-workstation-0:1.3.4-54.el4_6.1.s390",
"4ES:krb5-workstation-0:1.3.4-54.el4_6.1.s390x",
"4ES:krb5-workstation-0:1.3.4-54.el4_6.1.x86_64",
"4WS:krb5-0:1.3.4-54.el4_6.1.src",
"4WS:krb5-debuginfo-0:1.3.4-54.el4_6.1.i386",
"4WS:krb5-debuginfo-0:1.3.4-54.el4_6.1.ia64",
"4WS:krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc",
"4WS:krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc64",
"4WS:krb5-debuginfo-0:1.3.4-54.el4_6.1.s390",
"4WS:krb5-debuginfo-0:1.3.4-54.el4_6.1.s390x",
"4WS:krb5-debuginfo-0:1.3.4-54.el4_6.1.x86_64",
"4WS:krb5-devel-0:1.3.4-54.el4_6.1.i386",
"4WS:krb5-devel-0:1.3.4-54.el4_6.1.ia64",
"4WS:krb5-devel-0:1.3.4-54.el4_6.1.ppc",
"4WS:krb5-devel-0:1.3.4-54.el4_6.1.s390",
"4WS:krb5-devel-0:1.3.4-54.el4_6.1.s390x",
"4WS:krb5-devel-0:1.3.4-54.el4_6.1.x86_64",
"4WS:krb5-libs-0:1.3.4-54.el4_6.1.i386",
"4WS:krb5-libs-0:1.3.4-54.el4_6.1.ia64",
"4WS:krb5-libs-0:1.3.4-54.el4_6.1.ppc",
"4WS:krb5-libs-0:1.3.4-54.el4_6.1.ppc64",
"4WS:krb5-libs-0:1.3.4-54.el4_6.1.s390",
"4WS:krb5-libs-0:1.3.4-54.el4_6.1.s390x",
"4WS:krb5-libs-0:1.3.4-54.el4_6.1.x86_64",
"4WS:krb5-server-0:1.3.4-54.el4_6.1.i386",
"4WS:krb5-server-0:1.3.4-54.el4_6.1.ia64",
"4WS:krb5-server-0:1.3.4-54.el4_6.1.ppc",
"4WS:krb5-server-0:1.3.4-54.el4_6.1.s390",
"4WS:krb5-server-0:1.3.4-54.el4_6.1.s390x",
"4WS:krb5-server-0:1.3.4-54.el4_6.1.x86_64",
"4WS:krb5-workstation-0:1.3.4-54.el4_6.1.i386",
"4WS:krb5-workstation-0:1.3.4-54.el4_6.1.ia64",
"4WS:krb5-workstation-0:1.3.4-54.el4_6.1.ppc",
"4WS:krb5-workstation-0:1.3.4-54.el4_6.1.s390",
"4WS:krb5-workstation-0:1.3.4-54.el4_6.1.s390x",
"4WS:krb5-workstation-0:1.3.4-54.el4_6.1.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2008:0180"
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "krb5: uninitialized pointer use in krb5kdc"
},
{
"acknowledgments": [
{
"names": [
"MIT"
]
}
],
"cve": "CVE-2008-0063",
"discovery_date": "2008-02-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "432621"
}
],
"notes": [
{
"category": "description",
"text": "The Kerberos 4 support in KDC in MIT Kerberos 5 (krb5kdc) does not properly clear the unused portion of a buffer when generating an error message, which might allow remote attackers to obtain sensitive information, aka \"Uninitialized stack values.\"",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "krb5: possible leak of sensitive data from krb5kdc using krb4 request",
"title": "Vulnerability summary"
}
],
"product_status": {
"fixed": [
"4AS:krb5-0:1.3.4-54.el4_6.1.src",
"4AS:krb5-debuginfo-0:1.3.4-54.el4_6.1.i386",
"4AS:krb5-debuginfo-0:1.3.4-54.el4_6.1.ia64",
"4AS:krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc",
"4AS:krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc64",
"4AS:krb5-debuginfo-0:1.3.4-54.el4_6.1.s390",
"4AS:krb5-debuginfo-0:1.3.4-54.el4_6.1.s390x",
"4AS:krb5-debuginfo-0:1.3.4-54.el4_6.1.x86_64",
"4AS:krb5-devel-0:1.3.4-54.el4_6.1.i386",
"4AS:krb5-devel-0:1.3.4-54.el4_6.1.ia64",
"4AS:krb5-devel-0:1.3.4-54.el4_6.1.ppc",
"4AS:krb5-devel-0:1.3.4-54.el4_6.1.s390",
"4AS:krb5-devel-0:1.3.4-54.el4_6.1.s390x",
"4AS:krb5-devel-0:1.3.4-54.el4_6.1.x86_64",
"4AS:krb5-libs-0:1.3.4-54.el4_6.1.i386",
"4AS:krb5-libs-0:1.3.4-54.el4_6.1.ia64",
"4AS:krb5-libs-0:1.3.4-54.el4_6.1.ppc",
"4AS:krb5-libs-0:1.3.4-54.el4_6.1.ppc64",
"4AS:krb5-libs-0:1.3.4-54.el4_6.1.s390",
"4AS:krb5-libs-0:1.3.4-54.el4_6.1.s390x",
"4AS:krb5-libs-0:1.3.4-54.el4_6.1.x86_64",
"4AS:krb5-server-0:1.3.4-54.el4_6.1.i386",
"4AS:krb5-server-0:1.3.4-54.el4_6.1.ia64",
"4AS:krb5-server-0:1.3.4-54.el4_6.1.ppc",
"4AS:krb5-server-0:1.3.4-54.el4_6.1.s390",
"4AS:krb5-server-0:1.3.4-54.el4_6.1.s390x",
"4AS:krb5-server-0:1.3.4-54.el4_6.1.x86_64",
"4AS:krb5-workstation-0:1.3.4-54.el4_6.1.i386",
"4AS:krb5-workstation-0:1.3.4-54.el4_6.1.ia64",
"4AS:krb5-workstation-0:1.3.4-54.el4_6.1.ppc",
"4AS:krb5-workstation-0:1.3.4-54.el4_6.1.s390",
"4AS:krb5-workstation-0:1.3.4-54.el4_6.1.s390x",
"4AS:krb5-workstation-0:1.3.4-54.el4_6.1.x86_64",
"4Desktop:krb5-0:1.3.4-54.el4_6.1.src",
"4Desktop:krb5-debuginfo-0:1.3.4-54.el4_6.1.i386",
"4Desktop:krb5-debuginfo-0:1.3.4-54.el4_6.1.ia64",
"4Desktop:krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc",
"4Desktop:krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc64",
"4Desktop:krb5-debuginfo-0:1.3.4-54.el4_6.1.s390",
"4Desktop:krb5-debuginfo-0:1.3.4-54.el4_6.1.s390x",
"4Desktop:krb5-debuginfo-0:1.3.4-54.el4_6.1.x86_64",
"4Desktop:krb5-devel-0:1.3.4-54.el4_6.1.i386",
"4Desktop:krb5-devel-0:1.3.4-54.el4_6.1.ia64",
"4Desktop:krb5-devel-0:1.3.4-54.el4_6.1.ppc",
"4Desktop:krb5-devel-0:1.3.4-54.el4_6.1.s390",
"4Desktop:krb5-devel-0:1.3.4-54.el4_6.1.s390x",
"4Desktop:krb5-devel-0:1.3.4-54.el4_6.1.x86_64",
"4Desktop:krb5-libs-0:1.3.4-54.el4_6.1.i386",
"4Desktop:krb5-libs-0:1.3.4-54.el4_6.1.ia64",
"4Desktop:krb5-libs-0:1.3.4-54.el4_6.1.ppc",
"4Desktop:krb5-libs-0:1.3.4-54.el4_6.1.ppc64",
"4Desktop:krb5-libs-0:1.3.4-54.el4_6.1.s390",
"4Desktop:krb5-libs-0:1.3.4-54.el4_6.1.s390x",
"4Desktop:krb5-libs-0:1.3.4-54.el4_6.1.x86_64",
"4Desktop:krb5-server-0:1.3.4-54.el4_6.1.i386",
"4Desktop:krb5-server-0:1.3.4-54.el4_6.1.ia64",
"4Desktop:krb5-server-0:1.3.4-54.el4_6.1.ppc",
"4Desktop:krb5-server-0:1.3.4-54.el4_6.1.s390",
"4Desktop:krb5-server-0:1.3.4-54.el4_6.1.s390x",
"4Desktop:krb5-server-0:1.3.4-54.el4_6.1.x86_64",
"4Desktop:krb5-workstation-0:1.3.4-54.el4_6.1.i386",
"4Desktop:krb5-workstation-0:1.3.4-54.el4_6.1.ia64",
"4Desktop:krb5-workstation-0:1.3.4-54.el4_6.1.ppc",
"4Desktop:krb5-workstation-0:1.3.4-54.el4_6.1.s390",
"4Desktop:krb5-workstation-0:1.3.4-54.el4_6.1.s390x",
"4Desktop:krb5-workstation-0:1.3.4-54.el4_6.1.x86_64",
"4ES:krb5-0:1.3.4-54.el4_6.1.src",
"4ES:krb5-debuginfo-0:1.3.4-54.el4_6.1.i386",
"4ES:krb5-debuginfo-0:1.3.4-54.el4_6.1.ia64",
"4ES:krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc",
"4ES:krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc64",
"4ES:krb5-debuginfo-0:1.3.4-54.el4_6.1.s390",
"4ES:krb5-debuginfo-0:1.3.4-54.el4_6.1.s390x",
"4ES:krb5-debuginfo-0:1.3.4-54.el4_6.1.x86_64",
"4ES:krb5-devel-0:1.3.4-54.el4_6.1.i386",
"4ES:krb5-devel-0:1.3.4-54.el4_6.1.ia64",
"4ES:krb5-devel-0:1.3.4-54.el4_6.1.ppc",
"4ES:krb5-devel-0:1.3.4-54.el4_6.1.s390",
"4ES:krb5-devel-0:1.3.4-54.el4_6.1.s390x",
"4ES:krb5-devel-0:1.3.4-54.el4_6.1.x86_64",
"4ES:krb5-libs-0:1.3.4-54.el4_6.1.i386",
"4ES:krb5-libs-0:1.3.4-54.el4_6.1.ia64",
"4ES:krb5-libs-0:1.3.4-54.el4_6.1.ppc",
"4ES:krb5-libs-0:1.3.4-54.el4_6.1.ppc64",
"4ES:krb5-libs-0:1.3.4-54.el4_6.1.s390",
"4ES:krb5-libs-0:1.3.4-54.el4_6.1.s390x",
"4ES:krb5-libs-0:1.3.4-54.el4_6.1.x86_64",
"4ES:krb5-server-0:1.3.4-54.el4_6.1.i386",
"4ES:krb5-server-0:1.3.4-54.el4_6.1.ia64",
"4ES:krb5-server-0:1.3.4-54.el4_6.1.ppc",
"4ES:krb5-server-0:1.3.4-54.el4_6.1.s390",
"4ES:krb5-server-0:1.3.4-54.el4_6.1.s390x",
"4ES:krb5-server-0:1.3.4-54.el4_6.1.x86_64",
"4ES:krb5-workstation-0:1.3.4-54.el4_6.1.i386",
"4ES:krb5-workstation-0:1.3.4-54.el4_6.1.ia64",
"4ES:krb5-workstation-0:1.3.4-54.el4_6.1.ppc",
"4ES:krb5-workstation-0:1.3.4-54.el4_6.1.s390",
"4ES:krb5-workstation-0:1.3.4-54.el4_6.1.s390x",
"4ES:krb5-workstation-0:1.3.4-54.el4_6.1.x86_64",
"4WS:krb5-0:1.3.4-54.el4_6.1.src",
"4WS:krb5-debuginfo-0:1.3.4-54.el4_6.1.i386",
"4WS:krb5-debuginfo-0:1.3.4-54.el4_6.1.ia64",
"4WS:krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc",
"4WS:krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc64",
"4WS:krb5-debuginfo-0:1.3.4-54.el4_6.1.s390",
"4WS:krb5-debuginfo-0:1.3.4-54.el4_6.1.s390x",
"4WS:krb5-debuginfo-0:1.3.4-54.el4_6.1.x86_64",
"4WS:krb5-devel-0:1.3.4-54.el4_6.1.i386",
"4WS:krb5-devel-0:1.3.4-54.el4_6.1.ia64",
"4WS:krb5-devel-0:1.3.4-54.el4_6.1.ppc",
"4WS:krb5-devel-0:1.3.4-54.el4_6.1.s390",
"4WS:krb5-devel-0:1.3.4-54.el4_6.1.s390x",
"4WS:krb5-devel-0:1.3.4-54.el4_6.1.x86_64",
"4WS:krb5-libs-0:1.3.4-54.el4_6.1.i386",
"4WS:krb5-libs-0:1.3.4-54.el4_6.1.ia64",
"4WS:krb5-libs-0:1.3.4-54.el4_6.1.ppc",
"4WS:krb5-libs-0:1.3.4-54.el4_6.1.ppc64",
"4WS:krb5-libs-0:1.3.4-54.el4_6.1.s390",
"4WS:krb5-libs-0:1.3.4-54.el4_6.1.s390x",
"4WS:krb5-libs-0:1.3.4-54.el4_6.1.x86_64",
"4WS:krb5-server-0:1.3.4-54.el4_6.1.i386",
"4WS:krb5-server-0:1.3.4-54.el4_6.1.ia64",
"4WS:krb5-server-0:1.3.4-54.el4_6.1.ppc",
"4WS:krb5-server-0:1.3.4-54.el4_6.1.s390",
"4WS:krb5-server-0:1.3.4-54.el4_6.1.s390x",
"4WS:krb5-server-0:1.3.4-54.el4_6.1.x86_64",
"4WS:krb5-workstation-0:1.3.4-54.el4_6.1.i386",
"4WS:krb5-workstation-0:1.3.4-54.el4_6.1.ia64",
"4WS:krb5-workstation-0:1.3.4-54.el4_6.1.ppc",
"4WS:krb5-workstation-0:1.3.4-54.el4_6.1.s390",
"4WS:krb5-workstation-0:1.3.4-54.el4_6.1.s390x",
"4WS:krb5-workstation-0:1.3.4-54.el4_6.1.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2008-0063"
},
{
"category": "external",
"summary": "RHBZ#432621",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=432621"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2008-0063",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-0063"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2008-0063",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2008-0063"
}
],
"release_date": "2008-03-18T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2008-03-18T18:35:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/FAQ_58_10188",
"product_ids": [
"4AS:krb5-0:1.3.4-54.el4_6.1.src",
"4AS:krb5-debuginfo-0:1.3.4-54.el4_6.1.i386",
"4AS:krb5-debuginfo-0:1.3.4-54.el4_6.1.ia64",
"4AS:krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc",
"4AS:krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc64",
"4AS:krb5-debuginfo-0:1.3.4-54.el4_6.1.s390",
"4AS:krb5-debuginfo-0:1.3.4-54.el4_6.1.s390x",
"4AS:krb5-debuginfo-0:1.3.4-54.el4_6.1.x86_64",
"4AS:krb5-devel-0:1.3.4-54.el4_6.1.i386",
"4AS:krb5-devel-0:1.3.4-54.el4_6.1.ia64",
"4AS:krb5-devel-0:1.3.4-54.el4_6.1.ppc",
"4AS:krb5-devel-0:1.3.4-54.el4_6.1.s390",
"4AS:krb5-devel-0:1.3.4-54.el4_6.1.s390x",
"4AS:krb5-devel-0:1.3.4-54.el4_6.1.x86_64",
"4AS:krb5-libs-0:1.3.4-54.el4_6.1.i386",
"4AS:krb5-libs-0:1.3.4-54.el4_6.1.ia64",
"4AS:krb5-libs-0:1.3.4-54.el4_6.1.ppc",
"4AS:krb5-libs-0:1.3.4-54.el4_6.1.ppc64",
"4AS:krb5-libs-0:1.3.4-54.el4_6.1.s390",
"4AS:krb5-libs-0:1.3.4-54.el4_6.1.s390x",
"4AS:krb5-libs-0:1.3.4-54.el4_6.1.x86_64",
"4AS:krb5-server-0:1.3.4-54.el4_6.1.i386",
"4AS:krb5-server-0:1.3.4-54.el4_6.1.ia64",
"4AS:krb5-server-0:1.3.4-54.el4_6.1.ppc",
"4AS:krb5-server-0:1.3.4-54.el4_6.1.s390",
"4AS:krb5-server-0:1.3.4-54.el4_6.1.s390x",
"4AS:krb5-server-0:1.3.4-54.el4_6.1.x86_64",
"4AS:krb5-workstation-0:1.3.4-54.el4_6.1.i386",
"4AS:krb5-workstation-0:1.3.4-54.el4_6.1.ia64",
"4AS:krb5-workstation-0:1.3.4-54.el4_6.1.ppc",
"4AS:krb5-workstation-0:1.3.4-54.el4_6.1.s390",
"4AS:krb5-workstation-0:1.3.4-54.el4_6.1.s390x",
"4AS:krb5-workstation-0:1.3.4-54.el4_6.1.x86_64",
"4Desktop:krb5-0:1.3.4-54.el4_6.1.src",
"4Desktop:krb5-debuginfo-0:1.3.4-54.el4_6.1.i386",
"4Desktop:krb5-debuginfo-0:1.3.4-54.el4_6.1.ia64",
"4Desktop:krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc",
"4Desktop:krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc64",
"4Desktop:krb5-debuginfo-0:1.3.4-54.el4_6.1.s390",
"4Desktop:krb5-debuginfo-0:1.3.4-54.el4_6.1.s390x",
"4Desktop:krb5-debuginfo-0:1.3.4-54.el4_6.1.x86_64",
"4Desktop:krb5-devel-0:1.3.4-54.el4_6.1.i386",
"4Desktop:krb5-devel-0:1.3.4-54.el4_6.1.ia64",
"4Desktop:krb5-devel-0:1.3.4-54.el4_6.1.ppc",
"4Desktop:krb5-devel-0:1.3.4-54.el4_6.1.s390",
"4Desktop:krb5-devel-0:1.3.4-54.el4_6.1.s390x",
"4Desktop:krb5-devel-0:1.3.4-54.el4_6.1.x86_64",
"4Desktop:krb5-libs-0:1.3.4-54.el4_6.1.i386",
"4Desktop:krb5-libs-0:1.3.4-54.el4_6.1.ia64",
"4Desktop:krb5-libs-0:1.3.4-54.el4_6.1.ppc",
"4Desktop:krb5-libs-0:1.3.4-54.el4_6.1.ppc64",
"4Desktop:krb5-libs-0:1.3.4-54.el4_6.1.s390",
"4Desktop:krb5-libs-0:1.3.4-54.el4_6.1.s390x",
"4Desktop:krb5-libs-0:1.3.4-54.el4_6.1.x86_64",
"4Desktop:krb5-server-0:1.3.4-54.el4_6.1.i386",
"4Desktop:krb5-server-0:1.3.4-54.el4_6.1.ia64",
"4Desktop:krb5-server-0:1.3.4-54.el4_6.1.ppc",
"4Desktop:krb5-server-0:1.3.4-54.el4_6.1.s390",
"4Desktop:krb5-server-0:1.3.4-54.el4_6.1.s390x",
"4Desktop:krb5-server-0:1.3.4-54.el4_6.1.x86_64",
"4Desktop:krb5-workstation-0:1.3.4-54.el4_6.1.i386",
"4Desktop:krb5-workstation-0:1.3.4-54.el4_6.1.ia64",
"4Desktop:krb5-workstation-0:1.3.4-54.el4_6.1.ppc",
"4Desktop:krb5-workstation-0:1.3.4-54.el4_6.1.s390",
"4Desktop:krb5-workstation-0:1.3.4-54.el4_6.1.s390x",
"4Desktop:krb5-workstation-0:1.3.4-54.el4_6.1.x86_64",
"4ES:krb5-0:1.3.4-54.el4_6.1.src",
"4ES:krb5-debuginfo-0:1.3.4-54.el4_6.1.i386",
"4ES:krb5-debuginfo-0:1.3.4-54.el4_6.1.ia64",
"4ES:krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc",
"4ES:krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc64",
"4ES:krb5-debuginfo-0:1.3.4-54.el4_6.1.s390",
"4ES:krb5-debuginfo-0:1.3.4-54.el4_6.1.s390x",
"4ES:krb5-debuginfo-0:1.3.4-54.el4_6.1.x86_64",
"4ES:krb5-devel-0:1.3.4-54.el4_6.1.i386",
"4ES:krb5-devel-0:1.3.4-54.el4_6.1.ia64",
"4ES:krb5-devel-0:1.3.4-54.el4_6.1.ppc",
"4ES:krb5-devel-0:1.3.4-54.el4_6.1.s390",
"4ES:krb5-devel-0:1.3.4-54.el4_6.1.s390x",
"4ES:krb5-devel-0:1.3.4-54.el4_6.1.x86_64",
"4ES:krb5-libs-0:1.3.4-54.el4_6.1.i386",
"4ES:krb5-libs-0:1.3.4-54.el4_6.1.ia64",
"4ES:krb5-libs-0:1.3.4-54.el4_6.1.ppc",
"4ES:krb5-libs-0:1.3.4-54.el4_6.1.ppc64",
"4ES:krb5-libs-0:1.3.4-54.el4_6.1.s390",
"4ES:krb5-libs-0:1.3.4-54.el4_6.1.s390x",
"4ES:krb5-libs-0:1.3.4-54.el4_6.1.x86_64",
"4ES:krb5-server-0:1.3.4-54.el4_6.1.i386",
"4ES:krb5-server-0:1.3.4-54.el4_6.1.ia64",
"4ES:krb5-server-0:1.3.4-54.el4_6.1.ppc",
"4ES:krb5-server-0:1.3.4-54.el4_6.1.s390",
"4ES:krb5-server-0:1.3.4-54.el4_6.1.s390x",
"4ES:krb5-server-0:1.3.4-54.el4_6.1.x86_64",
"4ES:krb5-workstation-0:1.3.4-54.el4_6.1.i386",
"4ES:krb5-workstation-0:1.3.4-54.el4_6.1.ia64",
"4ES:krb5-workstation-0:1.3.4-54.el4_6.1.ppc",
"4ES:krb5-workstation-0:1.3.4-54.el4_6.1.s390",
"4ES:krb5-workstation-0:1.3.4-54.el4_6.1.s390x",
"4ES:krb5-workstation-0:1.3.4-54.el4_6.1.x86_64",
"4WS:krb5-0:1.3.4-54.el4_6.1.src",
"4WS:krb5-debuginfo-0:1.3.4-54.el4_6.1.i386",
"4WS:krb5-debuginfo-0:1.3.4-54.el4_6.1.ia64",
"4WS:krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc",
"4WS:krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc64",
"4WS:krb5-debuginfo-0:1.3.4-54.el4_6.1.s390",
"4WS:krb5-debuginfo-0:1.3.4-54.el4_6.1.s390x",
"4WS:krb5-debuginfo-0:1.3.4-54.el4_6.1.x86_64",
"4WS:krb5-devel-0:1.3.4-54.el4_6.1.i386",
"4WS:krb5-devel-0:1.3.4-54.el4_6.1.ia64",
"4WS:krb5-devel-0:1.3.4-54.el4_6.1.ppc",
"4WS:krb5-devel-0:1.3.4-54.el4_6.1.s390",
"4WS:krb5-devel-0:1.3.4-54.el4_6.1.s390x",
"4WS:krb5-devel-0:1.3.4-54.el4_6.1.x86_64",
"4WS:krb5-libs-0:1.3.4-54.el4_6.1.i386",
"4WS:krb5-libs-0:1.3.4-54.el4_6.1.ia64",
"4WS:krb5-libs-0:1.3.4-54.el4_6.1.ppc",
"4WS:krb5-libs-0:1.3.4-54.el4_6.1.ppc64",
"4WS:krb5-libs-0:1.3.4-54.el4_6.1.s390",
"4WS:krb5-libs-0:1.3.4-54.el4_6.1.s390x",
"4WS:krb5-libs-0:1.3.4-54.el4_6.1.x86_64",
"4WS:krb5-server-0:1.3.4-54.el4_6.1.i386",
"4WS:krb5-server-0:1.3.4-54.el4_6.1.ia64",
"4WS:krb5-server-0:1.3.4-54.el4_6.1.ppc",
"4WS:krb5-server-0:1.3.4-54.el4_6.1.s390",
"4WS:krb5-server-0:1.3.4-54.el4_6.1.s390x",
"4WS:krb5-server-0:1.3.4-54.el4_6.1.x86_64",
"4WS:krb5-workstation-0:1.3.4-54.el4_6.1.i386",
"4WS:krb5-workstation-0:1.3.4-54.el4_6.1.ia64",
"4WS:krb5-workstation-0:1.3.4-54.el4_6.1.ppc",
"4WS:krb5-workstation-0:1.3.4-54.el4_6.1.s390",
"4WS:krb5-workstation-0:1.3.4-54.el4_6.1.s390x",
"4WS:krb5-workstation-0:1.3.4-54.el4_6.1.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2008:0180"
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "krb5: possible leak of sensitive data from krb5kdc using krb4 request"
}
]
}
Loading…
Trend slope:
-
(linear fit over daily sighting counts)
Show additional events:
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…