krb5: denial of service [LWN.net]

Package(s):

krb5

CVE #(s):

CVE-2012-1015

Created:

August 1, 2012

Updated:

August 6, 2012

Description:

From the Red Hat advisory:

An uninitialized pointer use flaw was found in the way the MIT Kerberos KDC handled initial authentication requests (AS-REQ). A remote, unauthenticated attacker could use this flaw to crash the KDC via a specially-crafted AS-REQ request.

Alerts:

Red Hat	RHSA-2012:1131-01	2012-07-31
CentOS	CESA-2012:1131	2012-07-31
Debian	DSA-2518-1	2012-07-31
Oracle	ELSA-2012-1131	2012-07-31
Scientific Linux	SL-krb5-20120801	2012-08-01
Ubuntu	USN-1520-1	2012-07-31
Mandriva	MDVSA-2012:111	2012-08-01
Fedora	FEDORA-2012-11388	2012-08-05
Mageia	MGASA-2012-0196	2012-08-03
openSUSE	openSUSE-SU-2012:0967-1	2012-08-08
Fedora	FEDORA-2012-11370	2012-08-09
Mandriva	MDVSA-2013:042	2013-04-05

(Log in to post comments)