tocsin

Debian/krb5: unknown

The prep_reprocess_req function in do_tgs_req.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.10.5 does not properly perform service-principal realm referral, which allows

Action: Upgrade krb5 to 1.10.1+dfsg-5 or later.

Affected

introducedfixedlast affected
01.10.1+dfsg-5-

Fixed versions

1.10.1+dfsg-5

Sources

published · modified · JSON