MGASA-2013-0336

Dashboard / Vulnerabilities / MGASA-2013-0336

MGASA-2013-0336

Summary: Updated krb5 package fixes security vulnerabilities

Details: An authenticated remote client can cause a KDC to crash by making a valid TGS-REQ to a KDC serving a realm with a single-component name. The process_tgs_req() function dereferences a null pointer because an unusual failure condition causes a helper function to return success (CVE-2013-1417). If a KDC serves multiple realms, certain requests can cause setup_server_realm() to dereference a null pointer, crashing the KDC. This can be triggered by an unauthenticated user (CVE-2013-1418).

References: https://advisories.mageia.org/MGASA-2013-0336.html, https://bugs.mageia.org/show_bug.cgi?id=11668, http://web.mit.edu/kerberos/krb5-1.11/README-1.11.4.txt, https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-1418