Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

altlinux логотип

ALT-PU-2023-4976

Высокий

ALT-PU-2023-4976: package krb5 update to version 1.21.2-alt1

Источник
errata.altlinux.org
Дата публикации
16.08.2023
Дата обновления
16.08.2023
Устраненные уязвимости
1
ALT Linux branch p11
ALT Container
ALT Education
ALT Workstation
ALT Workstation K
ALT Server
ALT Virtualization PVE Edition

Описание

This update upgrades krb5 to version 1.21.2-alt1.

Устраненные уязвимости1

Ссылки1

ALT-PU-2023-4976https://errata.altlinux.org/ALT-PU-2023-4976

Связанные уязвимости

ubuntu логотип

CVE-2023-39975

CVSS3: 8.8
ubuntu
около 3 лет назад

kdc/do_tgs_req.c in MIT Kerberos 5 (aka krb5) 1.21 before 1.21.2 has a double free that is reachable if an authenticated user can trigger an authorization-data handling failure. Incorrect data is copied from one ticket to another.

redhat логотип

CVE-2023-39975

CVSS3: 8.8
redhat
около 3 лет назад

kdc/do_tgs_req.c in MIT Kerberos 5 (aka krb5) 1.21 before 1.21.2 has a double free that is reachable if an authenticated user can trigger an authorization-data handling failure. Incorrect data is copied from one ticket to another.

nvd логотип

CVE-2023-39975

CVSS3: 8.8
nvd
около 3 лет назад

kdc/do_tgs_req.c in MIT Kerberos 5 (aka krb5) 1.21 before 1.21.2 has a double free that is reachable if an authenticated user can trigger an authorization-data handling failure. Incorrect data is copied from one ticket to another.

debian логотип

CVE-2023-39975

CVSS3: 8.8
debian
около 3 лет назад

kdc/do_tgs_req.c in MIT Kerberos 5 (aka krb5) 1.21 before 1.21.2 has a ...

github логотип

GHSA-4grv-wgvh-8x82

CVSS3: 8.8
github
около 3 лет назад

kdc/do_tgs_req.c in MIT Kerberos 5 (aka krb5) 1.21 before 1.21.2 has a double free that is reachable if an authenticated user can trigger an authorization-data handling failure. Incorrect data is copied from one ticket to another.