tocsin

Debian/krb5: unknown

MIT Kerberos 5 (aka krb5) through 1.13.1 incorrectly expects that a krb5_read_message data field is represented as a string ending with a '\0' character, which allows remote attackers to (1) cause a d

Action: Upgrade krb5 to 1.12.1+dfsg-18 or later.

Affected

introducedfixedlast affected
01.12.1+dfsg-18-

Fixed versions

1.12.1+dfsg-18

Sources

published · modified · JSON