Alerts This Week
Warning Icon 1 764
Alerts This Week
Warning Icon 1 764

SUSE MicroOS 5.1: 2021:3454-3 Moderate: KDC Dereference Error

suse
Calendar Grey December 6, 2021
Dist Suse Esm H88
New patch released for krb5 resolving a medium-level vulnerability noted in CVE-2021-37750 affecting SUSE MicroOS.
An update that fixes one vulnerability is now available

Summary

This update for krb5 fixes the following issues: - CVE-2021-37750: Fixed KDC null pointer dereference via a FAST inner body that lacks a server field (bsc#1189929). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE MicroOS 5.1: zypper in -t patch SUSE-SUSE-MicroOS-5.1-2021-3454=1 Package List: - SUSE MicroOS 5.1 (s390x x86_64): krb5-1.16.3-3.24.1 krb5-debuginfo-1.16.3-3.24.1 krb5-debugsource-1.16.3-3.24.1

Topics%20covered

Topics Covered

security advisory moderate security update null pointer krb5 KDC issue SUSE MicroOS

References

#1189929

Cross- CVE-2021-37750

CVSS scores:

CVE-2021-37750 (SUSE): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected Products:

SUSE MicroOS 5.1

https://www.suse.com/security/cve/CVE-2021-37750.html

https://bugzilla.suse.com/1189929

Announcement ID: SUSE-SU-2021:3454-2
Rating: moderate

Topics%20covered

Topics Covered

security advisory moderate security update null pointer krb5 KDC issue SUSE MicroOS

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here