Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Debian · 12 | munge | 0.5.15-2+deb12u1 |
| Debian · 13 | munge | 0.5.16-1.1~deb13u1 |
Vulnerabilities 1
-
High 7.7
MUNGE has a buffer overflow in message unpacking allows key leakage and credential forgery
MUNGE is an authentication service for creating and validating user credentials. From 0.5 to 0.5.17, local attacker can exploit a buffer overflow vulnerability in munged (the MUNGE authentication daemon) to leak cryptographic key material from process memory.…