Alerts This Week
Warning Icon 1 692
Alerts This Week
Warning Icon 1 692

Mageia 8: MGASA-2021-0543 Critical: Heimdal Samba Null Pointer Error

mageia
Calendar Grey December 8, 2021
Dist Mageia Esm H88
Heimdal updates released to patch vulnerability in samba kerberos service. Significant risks mitigated. Discover further information.
A null pointer de-reference was found in the way samba kerberos server handled missing sname in TGS-REQ (Ticket Granting Server - Request)

Summary

A null pointer de-reference was found in the way samba kerberos server handled missing sname in TGS-REQ (Ticket Granting Server - Request). An authenticated user could use this flaw to crash a samba server using heimdal

References

- https://bugs.mageia.org/show_bug.cgi?id=29658

- https://ubuntu.com/security/CVE-2021-3671

- https://www.cve.org/CVERecord?id=CVE-2021-3671

Topics%20covered

Topics Covered

security advisory samba threat null pointer heimdal mageia TGS-REQ

Resolution

SRPMS

- 8/core/heimdal-7.7.0-5.1.mga8

Severity
critical
Lowest
Low
Medium
High
Critical

Publication date: 08 Dec 2021
URL: https://advisories.mageia.org/MGASA-2021-0543.html
Type: security
CVE: CVE-2021-3671

Topics%20covered

Topics Covered

security advisory samba threat null pointer heimdal mageia TGS-REQ

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here