Skip to content
OpenAdvisories
Unscored DLA-1265-1 6 CVEs

krb5 - security update

Published Jan 31, 2018 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 7 krb5 1.10.1+dfsg-5+deb7u9

Vulnerabilities 6

  • Unscored —

    The setup_server_realm function in main.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.10…

  • Unscored —

    The kadm5_randkey_principal_3 function in lib/kadm5/srv/svr_principal.c in kadmind in MIT Kerberos 5 (aka krb5) before …

  • Unscored —

    The krb5_ldap_get_password_policy_from_dn function in plugins/kdb/ldap/libkdb_ldap/ldap_pwd_policy.c in MIT Kerberos 5 …

  • Unscored —

    MIT Kerberos 5 (aka krb5) through 1.13.1 incorrectly expects that a krb5_read_message data field is represented as a st…

  • Unscored —
    CVE-2016-3119 EPSS 40%

    The process_db_args function in plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c in the LDAP KDB module in kadmind in MIT…

  • Unscored —

    The validate_as_request function in kdc_util.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before…