Stay Secure with the Latest Linux Advisories

security advisorydenial of serviceremote execution

Mageia 8: 2022-0467 Critical: Krb5 Remote Execution And DoS Issue

Greg Hudson discovered integer overflow flaws in the PAC parsing in krb5, the MIT implementation of Kerberos, which may result in remote code execution (in a KDC, kadmin, or GSS or Kerberos application server process), information exposure (to a cross-realm KDC acting maliciously), or denial of service (KDC or kadmind process crash). . MGASA-2022-0467 - Updated krb5 packages fix security vulnerability Publication date: 17 Dec 2022 URL: https://advisories.mageia.org/MGASA-2022-0467.html Type: security Affected Mageia releases: 8 CVE: CVE-2022-42898 Greg Hudson discovered integer overflow flaws in the PAC parsing in krb5, the MIT implementation of Kerberos, which may result in remote code execution (in a KDC, kadmin, or GSS or Kerberos application server process), information exposure (to a cross-realm KDC acting maliciously), or denial of service (KDC or kadmind process crash). References: - https://bugs.mageia.org/show_bug.cgi?id=31157 - https://lists.debian.org/debian-security-announce/2022/msg00257.html - - https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./thread/KNFBR437JQZXMPIT2AJCTGKUTQAFEMBY/ - https://www.cve.org/CVERecord?id=CVE-2022-42898 SRPMS: - 8/core/krb5-1.18.3-1.3.mga8 . Recent updates to krb5 packages address severe security vulnerabilities, encompassing risks related to remote code execution and potential denial of service attacks.. Krb5 Update, Mageia 8, Remote Execution Issue, Security Fix, Integer Overflow. . Severity: Critical. LinuxSecurity.com Team

Dec 17, 2022 •Critical Mageia