Debian/krb5: medium 6.3
MIT Kerberos 5 (aka krb5) 1.8.x through 1.8.3 does not reject RC4 key-derivation checksums, which might allow remote authenticated users to forge a (1) AD-SIGNEDPATH or (2) AD-KDC-ISSUED signature, an
Action: Upgrade krb5 to 1.8.3+dfsg-3 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.8.3+dfsg-3 | - |
Fixed versions
| 1.8.3+dfsg-3 |
Sources
published · modified · JSON