Alexandru Moise 19dc7117fd krb5: Fix S4U2Self KDC crash when anon is restricted
This is CVE-2016-3120

The validate_as_request function in kdc_util.c in the Key Distribution
Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.13.6 and 1.4.x before
1.14.3, when restrict_anonymous_to_tgt is enabled, uses an incorrect
client data structure, which allows remote authenticated users to cause
a denial of service (NULL pointer dereference and daemon crash) via an
S4U2Self request.

Signed-off-by: Alexandru Moise <alexandru.moise@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2016-09-05 13:30:50 +02:00
2016-07-29 11:00:56 +02:00
2016-08-22 15:56:29 +02:00
2016-08-22 15:56:29 +02:00
2016-08-31 18:21:59 +02:00

Collection of layers for the OE-core universe

Please see the respective READMEs in the layer subdirectories

S
Description
No description provided
Readme 112 MiB
Languages
BitBake 85.2%
Shell 6.1%
C 3%
Roff 2.1%
NASL 1.9%
Other 1.5%