Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

rocky логотип

RLSA-2021:5142

Опубликовано: 15 дек. 2021
Источник: rocky
Оценка: Moderate

Описание

Moderate: idm:DL1 security update

Rocky Enterprise Software Foundation Identity Management (IdM) is a centralized authentication, identity management, and authorization solution for both traditional and cloud-based enterprise environments.

Security Fix(es):

  • samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets (CVE-2020-25719)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Затронутые продукты

  • Rocky Linux 8

НаименованиеАрхитектураРелизRPM
custodianoarch3.module+el8.4.0+429+6bd33feacustodia-0.6.0-3.module+el8.4.0+429+6bd33fea.noarch.rpm
opendnssecx86_641.module+el8.4.0+429+6bd33feaopendnssec-2.1.7-1.module+el8.4.0+429+6bd33fea.x86_64.rpm
python3-custodianoarch3.module+el8.4.0+429+6bd33feapython3-custodia-0.6.0-3.module+el8.4.0+429+6bd33fea.noarch.rpm
python3-kdcproxynoarch5.module+el8.3.0+244+0b2ae752python3-kdcproxy-0.4-5.module+el8.3.0+244+0b2ae752.noarch.rpm
python3-qrcodenoarch12.module+el8.4.0+429+6bd33feapython3-qrcode-5.1-12.module+el8.4.0+429+6bd33fea.noarch.rpm
python3-qrcode-corenoarch12.module+el8.4.0+429+6bd33feapython3-qrcode-core-5.1-12.module+el8.4.0+429+6bd33fea.noarch.rpm
softhsmx86_645.module+el8.4.0+429+6bd33feasofthsm-2.6.0-5.module+el8.4.0+429+6bd33fea.x86_64.rpm
softhsm-develx86_645.module+el8.4.0+429+6bd33feasofthsm-devel-2.6.0-5.module+el8.4.0+429+6bd33fea.x86_64.rpm

Показывать по

Связанные CVE

Исправления

Связанные уязвимости

CVSS3: 7.2
ubuntu
больше 3 лет назад

A flaw was found in the way Samba, as an Active Directory Domain Controller, implemented Kerberos name-based authentication. The Samba AD DC, could become confused about the user a ticket represents if it did not strictly require a Kerberos PAC and always use the SIDs found within. The result could include total domain compromise.

CVSS3: 7.2
redhat
больше 3 лет назад

A flaw was found in the way Samba, as an Active Directory Domain Controller, implemented Kerberos name-based authentication. The Samba AD DC, could become confused about the user a ticket represents if it did not strictly require a Kerberos PAC and always use the SIDs found within. The result could include total domain compromise.

CVSS3: 7.2
nvd
больше 3 лет назад

A flaw was found in the way Samba, as an Active Directory Domain Controller, implemented Kerberos name-based authentication. The Samba AD DC, could become confused about the user a ticket represents if it did not strictly require a Kerberos PAC and always use the SIDs found within. The result could include total domain compromise.

CVSS3: 7.2
msrc
10 месяцев назад

Описание отсутствует

CVSS3: 7.2
debian
больше 3 лет назад

A flaw was found in the way Samba, as an Active Directory Domain Contr ...