mirror of
https://github.com/openembedded/meta-openembedded.git
synced 2026-06-04 14:39:54 +00:00
19dc7117fd0e95d1477eb5797fbe2a3cca8f7760
This is CVE-2016-3120 The validate_as_request function in kdc_util.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.13.6 and 1.4.x before 1.14.3, when restrict_anonymous_to_tgt is enabled, uses an incorrect client data structure, which allows remote authenticated users to cause a denial of service (NULL pointer dereference and daemon crash) via an S4U2Self request. Signed-off-by: Alexandru Moise <alexandru.moise@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Collection of layers for the OE-core universe Please see the respective READMEs in the layer subdirectories
Description
Languages
BitBake
85.2%
Shell
6.1%
C
3%
Roff
2.1%
NASL
1.9%
Other
1.5%