MGASA-2015-0066

See a problem?
Please try reporting it to the source first.

Source

https://advisories.mageia.org/MGASA-2015-0066.html

Import Source

https://advisories.mageia.org/MGASA-2015-0066.json

JSON Data

https://api.test.osv.dev/v1/vulns/MGASA-2015-0066

Related

Published

2015-02-15T15:57:20Z

Modified

2015-02-15T15:48:45Z

Summary

Updated krb5 packages fix security vulnerabilities

Details

Updated krb5 packages fix security vulnerabilities:

Incorrect memory management in the libgssapi_krb5 library might result in denial of service or the execution of arbitrary code (CVE-2014-5352).

Incorrect memory management in kadmind's processing of XDR data might result in denial of service or the execution of arbitrary code (CVE-2014-9421).

Incorrect processing of two-component server principals might result in impersonation attacks (CVE-2014-9422).

An information leak in the libgssrpc library (CVE-2014-9423).

References

Credits

Affected packages

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.11.4-1.4.mga4

{
    "section": "core"
}