Skip to content
OpenAdvisories
Unscored DSA-3395-1 3 CVEs

krb5 - security update

Published Nov 6, 2015 · Updated Mar 9, 2026

Fixed packages 2

ReleasePackageFixed in
Debian · 7 krb5 1.10.1+dfsg-5+deb7u4
Debian · 8 krb5 1.12.1+dfsg-19+deb8u1

Vulnerabilities 3

  • Unscored —

    lib/gssapi/spnego/spnego_mech.c in MIT Kerberos 5 (aka krb5) before 1.14 relies on an inappropriate context handle, whi…

  • Unscored —

    lib/gssapi/krb5/iakerb.c in MIT Kerberos 5 (aka krb5) before 1.14 relies on an inappropriate context handle, which allo…

  • Unscored —

    The build_principal_va function in lib/krb5/krb/bld_princ.c in MIT Kerberos 5 (aka krb5) before 1.14 allows remote auth…