tocsin

Alpine/samba: medium 6.5

A null pointer de-reference was found in the way samba kerberos server handled missing sname in TGS-REQ (Ticket Granting Server - Request). An authenticated user could use this flaw to crash the samba

Action: Upgrade samba to 4.15.0-r0 or later.

Affected

introducedfixedlast affected
4.14.04.15.0-r0-

Fixed versions

4.15.0-r0

Sources

published · modified · JSON