Debian/krb5: high 7.5

The Kerberos 4 support in KDC in MIT Kerberos 5 (krb5kdc) does not properly clear the unused portion of a buffer when generating an error message, which might allow remote attackers to obtain sensitiv

Action: Upgrade krb5 to 1.6.dfsg.3~beta1-4 or later.

Affected

Fixed versions

Sources

• osv: DEBIAN-CVE-2008-0063#Debian:14/krb5
• https://security-tracker.debian.org/tracker/CVE-2008-0063

published 2008-03-19T10:44:00Z · modified 2026-10-23T18:00:03.025437346Z · JSON