tocsin

Alpine/heimdal: medium 6.5

A null pointer de-reference was found in the way samba kerberos server handled missing sname in TGS-REQ (Ticket Granting Server - Request). An authenticated user could use this flaw to crash the samba

Action: Upgrade heimdal to 7.7.1-r0 or later.

Affected

introducedfixedlast affected
07.7.1-r0-

Fixed versions

7.7.1-r0

Sources

published · modified · JSON