Alerts This Week
Warning Icon 1 764
Alerts This Week
Warning Icon 1 764

Mageia: 2019-0028 Moderate: krb5 Assertion Failure in KDC

mageia
Calendar Grey January 10, 2019
Dist Mageia Esm H88
MGASA-2019-0028 - Updated krb5 packages fix security vulnerability Publication date: 10 Jan 2019 URL
An authenticated user who can obtain a TGT using an older encryption type (DES, DES3, or RC4) can cause an assertion failure in the KDC by sending an S4U2Self request (CVE-2018-202...

Summary

An authenticated user who can obtain a TGT using an older encryption type (DES, DES3, or RC4) can cause an assertion failure in the KDC by sending an S4U2Self request (CVE-2018-20217).

References

- https://bugs.mageia.org/show_bug.cgi?id=24068

- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/2KNHELH4YHNT6H2ESJWX2UIDXLBNGB2O/

- https://www.cve.org/CVERecord?id=CVE-2018-20217

Topics%20covered

Topics Covered

security advisory encryption KDC assertion failure Mageia TGT S4U2Self

Resolution

SRPMS

- 6/core/krb5-1.15.1-2.4.mga6

Publication date: 10 Jan 2019
URL: https://advisories.mageia.org/MGASA-2019-0028.html
Type: security
CVE: CVE-2018-20217

Topics%20covered

Topics Covered

security advisory encryption KDC assertion failure Mageia TGT S4U2Self

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here