MGASA-2024-0253
- Source
- https://advisories.mageia.org/MGASA-2024-0253.html
- Import Source
- https://advisories.mageia.org/MGASA-2024-0253.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/MGASA-2024-0253
- Related
- Published
- 2024-07-03T16:36:28Z
- Modified
- 2024-07-03T16:18:08Z
- Summary
- Updated krb5 packages fix security vulnerabilities
- Details
-
Before 1.21.3, an attacker can modify the plaintext Extra Count field of a confidential GSS krb5 wrap token, causing the unwrapped token to appear truncated to the application. (CVE-2024-37370) Before 1.21.3, an attacker can cause invalid memory reads during GSS message token handling by sending message tokens with invalid length fields. (CVE-2024-37371)
- References
- Credits
-
-
- Mageia - COORDINATOR
-