Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 583
Alerts This Week
Warning Icon 1 583

Mageia 8: MGASA-2021-0543 Critical: Heimdal Samba Null Pointer Error

mageia
Calendar Grey December 8, 2021
Scroller Mageia
Heimdal updates released to patch vulnerability in samba kerberos service. Significant risks mitigated. Discover further information.
A null pointer de-reference was found in the way samba kerberos server handled missing sname in TGS-REQ (Ticket Granting Server - Request)

Summary

A null pointer de-reference was found in the way samba kerberos server handled missing sname in TGS-REQ (Ticket Granting Server - Request). An authenticated user could use this flaw to crash a samba server using heimdal

References

- https://bugs.mageia.org/show_bug.cgi?id=29658

- https://ubuntu.com/security/CVE-2021-3671

- https://www.cve.org/CVERecord?id=CVE-2021-3671

Topics%20covered

Topics Covered

security advisory samba threat null pointer heimdal mageia TGS-REQ

Resolution

SRPMS

- 8/core/heimdal-7.7.0-5.1.mga8

Severity
critical
Lowest
Low
Medium
High
Critical

Publication date: 08 Dec 2021
URL: https://advisories.mageia.org/MGASA-2021-0543.html
Type: security
CVE: CVE-2021-3671

Topics%20covered

Topics Covered

security advisory samba threat null pointer heimdal mageia TGS-REQ

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.