Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 525
Alerts This Week
Warning Icon 1 525

Scientific Linux 7: SLSA-2018:0666-1 Moderate: krb5 Authentication Fix

Calendar Apr 30, 2018 • User Avatar LinuxSecurity Advisories
1 - 2 min read
Scientific Large Esm H446
Topics%20covered

Topics Covered

security advisory moderate authentication bypass krb5 assertion failure scientific linux
krb5: Authentication bypass by improper validation of certificate EKU and SAN (CVE-2017-7562) * krb5: Invalid S4U2Self or S4U2Proxy request causes assertion failure (CVE-2017-11368) Additional Changes: SL7 x86_64 krb5-debuginfo-1.15.1-18.el7.i686.rpm krb5-debuginfo-1.15.1-18.el7.x86_64.rpm krb5-libs-1.15.1-18.el7.i686.rpm krb5-libs-1.15.1-18.el7.x86_64.rpm krb5-pkinit- [More...] 
Synopsis:          Moderate: krb5 security, bug fix, and enhancement update
Advisory ID:       SLSA-2018:0666-1
Issue Date:        2018-04-10
CVE Numbers:       CVE-2017-11368
                   CVE-2017-7562
--

Security Fix(es):

* krb5: Authentication bypass by improper validation of certificate EKU
and SAN (CVE-2017-7562)

* krb5: Invalid S4U2Self or S4U2Proxy request causes assertion failure
(CVE-2017-11368)

Additional Changes:
--

SL7
  x86_64
    krb5-debuginfo-1.15.1-18.el7.i686.rpm
    krb5-debuginfo-1.15.1-18.el7.x86_64.rpm
    krb5-libs-1.15.1-18.el7.i686.rpm
    krb5-libs-1.15.1-18.el7.x86_64.rpm
    krb5-pkinit-1.15.1-18.el7.x86_64.rpm
    krb5-workstation-1.15.1-18.el7.x86_64.rpm
    libkadm5-1.15.1-18.el7.i686.rpm
    libkadm5-1.15.1-18.el7.x86_64.rpm
    krb5-devel-1.15.1-18.el7.i686.rpm
    krb5-devel-1.15.1-18.el7.x86_64.rpm
    krb5-server-1.15.1-18.el7.x86_64.rpm
    krb5-server-ldap-1.15.1-18.el7.x86_64.rpm

- Scientific Linux Development Team