Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

openSUSE-SU-2017:3268-1

Опубликовано: 12 дек. 2017
Источник: suse-cvrf

Описание

Security update for libheimdal

This update for libheimdal fixes the following issues:

  • CVE-2017-17439: Remote unauthenticated attackers may have crashed the KDC (boo#1071675)

Список пакетов

openSUSE Leap 42.2
libheimdal-7.4.0-6.1
libheimdal-devel-7.4.0-6.1
openSUSE Leap 42.3
libheimdal-7.4.0-6.1
libheimdal-devel-7.4.0-6.1

Ссылки

Описание

In Heimdal through 7.4, remote unauthenticated attackers are able to crash the KDC by sending a crafted UDP packet containing empty data fields for client name or realm. The parser would unconditionally dereference NULL pointers in that case, leading to a segmentation fault. This is related to the _kdc_as_rep function in kdc/kerberos5.c and the der_length_visible_string function in lib/asn1/der_length.c.

Затронутые продукты
openSUSE Leap 42.2:libheimdal-7.4.0-6.1
openSUSE Leap 42.2:libheimdal-devel-7.4.0-6.1
openSUSE Leap 42.3:libheimdal-7.4.0-6.1
openSUSE Leap 42.3:libheimdal-devel-7.4.0-6.1
Ссылки