Debian/krb5: medium 6.5
In MIT Kerberos 5 (aka krb5) 1.7 and later, an authenticated attacker can cause a KDC assertion failure by sending invalid S4U2Self or S4U2Proxy requests.
Action: Upgrade krb5 to 1.15.1-2 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.15.1-2 | - |
Fixed versions
| 1.15.1-2 |
Sources
published · modified · JSON