Soumya Sambu 86124cc625 krb5: Fix CVE-2023-36054 ...

lib/kadm5/kadm_rpc_xdr.c in MIT Kerberos 5 (aka krb5) before 1.20.2
and 1.21.x before 1.21.1 frees an uninitialized pointer. A remote
authenticated user can trigger a kadmind crash. This occurs because
_xdr_kadm5_principal_ent_rec does not validate the relationship
between n_key_data and the key_data array count.

References:
https://nvd.nist.gov/vuln/detail/CVE-2023-36054

Signed-off-by: Soumya Sambu <soumya.sambu@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>

2023-09-04 11:55:22 -04:00

..

krb5

krb5: Fix CVE-2023-36054

2023-09-04 11:55:22 -04:00

krb5_1.20.1.bb

krb5: Fix CVE-2023-36054

2023-09-04 11:55:22 -04:00