mirror of
https://github.com/openembedded/meta-openembedded.git
synced 2026-08-28 01:55:13 +00:00
19dc7117fd0e95d1477eb5797fbe2a3cca8f7760
This is CVE-2016-3120 The validate_as_request function in kdc_util.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.13.6 and 1.4.x before 1.14.3, when restrict_anonymous_to_tgt is enabled, uses an incorrect client data structure, which allows remote authenticated users to cause a denial of service (NULL pointer dereference and daemon crash) via an S4U2Self request. Signed-off-by: Alexandru Moise <alexandru.moise@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Collection of layers for the OE-core universe Please see the respective READMEs in the layer subdirectories
Description
Languages
BitBake
86.2%
Shell
5.9%
C
2.8%
Roff
1.9%
NASL
1.7%
Other
1.3%