Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Debian · 11 | krb5 | 1.18.3-6+deb11u7 |
Vulnerabilities 1
-
Medium 5.9
Krb5: kerberos rc4-hmac-md5 checksum vulnerability enabling message spoofing via md5 collisions
A vulnerability in the MIT Kerberos implementation allows GSSAPI-protected messages using RC4-HMAC-MD5 to be spoofed due to weaknesses in the MD5 checksum design. If RC4 is preferred over stronger encryption types, an attacker could exploit MD5 collisions to …