Skip to content
OpenAdvisories
Unscored DLA-340-1 2 CVEs

krb5 - security update

Published Nov 7, 2015 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 6.0 krb5 1.8.3+dfsg-4squeeze10

Vulnerabilities 2

  • Unscored —

    lib/gssapi/spnego/spnego_mech.c in MIT Kerberos 5 (aka krb5) before 1.14 relies on an inappropriate context handle, whi…

  • Unscored —

    The build_principal_va function in lib/krb5/krb/bld_princ.c in MIT Kerberos 5 (aka krb5) before 1.14 allows remote auth…