tocsin

Debian/krb5: unknown

MIT Kerberos 5 (aka krb5) before 1.12.2 allows remote attackers to cause a denial of service (buffer over-read and application crash) by injecting invalid tokens into a GSSAPI application session.

Action: Upgrade krb5 to 1.12.1+dfsg-4 or later.

Affected

introducedfixedlast affected
01.12.1+dfsg-4-

Fixed versions

1.12.1+dfsg-4

Sources

published · modified · JSON