Joined: 12 May 2004
|Posted: Mon Nov 16, 2020 4:26 am Post subject: [ GLSA 202011-17 ] MIT Kerberos 5
|Gentoo Linux Security Advisory
Title: MIT Kerberos 5: Denial of service (GLSA 202011-17)
A vulnerability in MIT Kerberos 5 could lead to a Denial of Service
The MIT Kerberos 5 implementation provides a command line telnet client
which is used for remote login via the telnet protocol.
Vulnerable: < 1.18.2-r2
Unaffected: >= 1.18.2-r2
Architectures: All supported architectures
It was discovered that MIT Kerberos network authentication system, krb5,
did not properly handle ASN.1-encoded Kerberos messages.
A remote attacker could send a specially crafted Kerberos message,
possibly resulting in a Denial of Service condition.
There is no known workaround at this time.
All MIT Kerberos 5 users should upgrade to the latest version:
|# emerge --sync
# emerge --ask --oneshot --verbose ">=app-crypt/mit-krb5-1.18.2-r2"