Debian/heimdal: medium 6.5
A null pointer de-reference was found in the way samba kerberos server handled missing sname in TGS-REQ (Ticket Granting Server - Request). An authenticated user could use this flaw to crash the samba
Action: Upgrade heimdal to 7.7.0+dfsg-3 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 7.7.0+dfsg-3 | - |
Fixed versions
| 7.7.0+dfsg-3 |
Sources
- osv: DEBIAN-CVE-2021-3671#Debian:14/heimdal
- https://security-tracker.debian.org/tracker/CVE-2021-3671
published · modified · JSON