Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2017:2948-1

Опубликовано: 08 нояб. 2017
Источник: suse-cvrf

Описание

Security update for krb5

This update for krb5 fixes the following issues:

Security issues fixed:

  • CVE-2017-15088: A buffer overflow in get_matching_data() was fixed that could under specific circumstances be used to execute code (bsc#1065274)

Список пакетов

SUSE Linux Enterprise Desktop 12 SP2
krb5-1.12.5-40.16.1
krb5-32bit-1.12.5-40.16.1
krb5-client-1.12.5-40.16.1
SUSE Linux Enterprise Desktop 12 SP3
krb5-1.12.5-40.16.1
krb5-32bit-1.12.5-40.16.1
krb5-client-1.12.5-40.16.1
SUSE Linux Enterprise Server 12 SP2
krb5-1.12.5-40.16.1
krb5-32bit-1.12.5-40.16.1
krb5-client-1.12.5-40.16.1
krb5-doc-1.12.5-40.16.1
krb5-plugin-kdb-ldap-1.12.5-40.16.1
krb5-plugin-preauth-otp-1.12.5-40.16.1
krb5-plugin-preauth-pkinit-1.12.5-40.16.1
krb5-server-1.12.5-40.16.1
SUSE Linux Enterprise Server 12 SP3
krb5-1.12.5-40.16.1
krb5-32bit-1.12.5-40.16.1
krb5-client-1.12.5-40.16.1
krb5-doc-1.12.5-40.16.1
krb5-plugin-kdb-ldap-1.12.5-40.16.1
krb5-plugin-preauth-otp-1.12.5-40.16.1
krb5-plugin-preauth-pkinit-1.12.5-40.16.1
krb5-server-1.12.5-40.16.1
SUSE Linux Enterprise Server for Raspberry Pi 12 SP2
krb5-1.12.5-40.16.1
krb5-client-1.12.5-40.16.1
krb5-doc-1.12.5-40.16.1
krb5-plugin-kdb-ldap-1.12.5-40.16.1
krb5-plugin-preauth-otp-1.12.5-40.16.1
krb5-plugin-preauth-pkinit-1.12.5-40.16.1
krb5-server-1.12.5-40.16.1
SUSE Linux Enterprise Server for SAP Applications 12 SP2
krb5-1.12.5-40.16.1
krb5-32bit-1.12.5-40.16.1
krb5-client-1.12.5-40.16.1
krb5-doc-1.12.5-40.16.1
krb5-plugin-kdb-ldap-1.12.5-40.16.1
krb5-plugin-preauth-otp-1.12.5-40.16.1
krb5-plugin-preauth-pkinit-1.12.5-40.16.1
krb5-server-1.12.5-40.16.1
SUSE Linux Enterprise Server for SAP Applications 12 SP3
krb5-1.12.5-40.16.1
krb5-32bit-1.12.5-40.16.1
krb5-client-1.12.5-40.16.1
krb5-doc-1.12.5-40.16.1
krb5-plugin-kdb-ldap-1.12.5-40.16.1
krb5-plugin-preauth-otp-1.12.5-40.16.1
krb5-plugin-preauth-pkinit-1.12.5-40.16.1
krb5-server-1.12.5-40.16.1
SUSE Linux Enterprise Software Development Kit 12 SP2
krb5-devel-1.12.5-40.16.1
SUSE Linux Enterprise Software Development Kit 12 SP3
krb5-devel-1.12.5-40.16.1

Ссылки

Описание

plugins/preauth/pkinit/pkinit_crypto_openssl.c in MIT Kerberos 5 (aka krb5) through 1.15.2 mishandles Distinguished Name (DN) fields, which allows remote attackers to execute arbitrary code or cause a denial of service (buffer overflow and application crash) in situations involving untrusted X.509 data, related to the get_matching_data and X509_NAME_oneline_ex functions. NOTE: this has security relevance only in use cases outside of the MIT Kerberos distribution, e.g., the use of get_matching_data in KDC certauth plugin code that is specific to Red Hat.

Затронутые продукты
SUSE Linux Enterprise Desktop 12 SP2:krb5-1.12.5-40.16.1
SUSE Linux Enterprise Desktop 12 SP2:krb5-32bit-1.12.5-40.16.1
SUSE Linux Enterprise Desktop 12 SP2:krb5-client-1.12.5-40.16.1
SUSE Linux Enterprise Desktop 12 SP3:krb5-1.12.5-40.16.1
Ссылки