Skip to content
OpenAdvisories
Unscored RHSA-2007:0095 3 CVEs

Red Hat Security Advisory: krb5 security update

Published Sep 15, 2024 · Updated Jun 26, 2026

Fixed packages 82

ReleasePackageFixed in
Red Hat · RHEL 2 enterprise_linux:2.1::as krb5 0:1.2.2-44
Red Hat · RHEL 2 enterprise_linux:2.1::as krb5-devel 0:1.2.2-44
Red Hat · RHEL 2 enterprise_linux:2.1::as krb5-libs 0:1.2.2-44
Red Hat · RHEL 2 enterprise_linux:2.1::as krb5-server 0:1.2.2-44
Red Hat · RHEL 2 enterprise_linux:2.1::as krb5-workstation 0:1.2.2-44
Red Hat · RHEL 2 enterprise_linux:2.1::aw krb5 0:1.2.2-44
Red Hat · RHEL 2 enterprise_linux:2.1::aw krb5-devel 0:1.2.2-44
Red Hat · RHEL 2 enterprise_linux:2.1::aw krb5-libs 0:1.2.2-44
Red Hat · RHEL 2 enterprise_linux:2.1::aw krb5-server 0:1.2.2-44
Red Hat · RHEL 2 enterprise_linux:2.1::aw krb5-workstation 0:1.2.2-44
Red Hat · RHEL 2 enterprise_linux:2.1::es krb5 0:1.2.2-44
Red Hat · RHEL 2 enterprise_linux:2.1::es krb5-devel 0:1.2.2-44
Red Hat · RHEL 2 enterprise_linux:2.1::es krb5-libs 0:1.2.2-44
Red Hat · RHEL 2 enterprise_linux:2.1::es krb5-server 0:1.2.2-44
Red Hat · RHEL 2 enterprise_linux:2.1::es krb5-workstation 0:1.2.2-44
Red Hat · RHEL 2 enterprise_linux:2.1::ws krb5 0:1.2.2-44
Red Hat · RHEL 2 enterprise_linux:2.1::ws krb5-devel 0:1.2.2-44
Red Hat · RHEL 2 enterprise_linux:2.1::ws krb5-libs 0:1.2.2-44
Red Hat · RHEL 2 enterprise_linux:2.1::ws krb5-server 0:1.2.2-44
Red Hat · RHEL 2 enterprise_linux:2.1::ws krb5-workstation 0:1.2.2-44
Red Hat · RHEL 3 enterprise_linux:3::as krb5 0:1.2.7-61
Red Hat · RHEL 3 enterprise_linux:3::as krb5-debuginfo 0:1.2.7-61
Red Hat · RHEL 3 enterprise_linux:3::as krb5-devel 0:1.2.7-61
Red Hat · RHEL 3 enterprise_linux:3::as krb5-libs 0:1.2.7-61
Red Hat · RHEL 3 enterprise_linux:3::as krb5-server 0:1.2.7-61
Red Hat · RHEL 3 enterprise_linux:3::as krb5-workstation 0:1.2.7-61
Red Hat · RHEL 3 enterprise_linux:3::desktop krb5 0:1.2.7-61
Red Hat · RHEL 3 enterprise_linux:3::desktop krb5-debuginfo 0:1.2.7-61
Red Hat · RHEL 3 enterprise_linux:3::desktop krb5-devel 0:1.2.7-61
Red Hat · RHEL 3 enterprise_linux:3::desktop krb5-libs 0:1.2.7-61
Red Hat · RHEL 3 enterprise_linux:3::desktop krb5-server 0:1.2.7-61
Red Hat · RHEL 3 enterprise_linux:3::desktop krb5-workstation 0:1.2.7-61
Red Hat · RHEL 3 enterprise_linux:3::es krb5 0:1.2.7-61
Red Hat · RHEL 3 enterprise_linux:3::es krb5-debuginfo 0:1.2.7-61
Red Hat · RHEL 3 enterprise_linux:3::es krb5-devel 0:1.2.7-61
Red Hat · RHEL 3 enterprise_linux:3::es krb5-libs 0:1.2.7-61
Red Hat · RHEL 3 enterprise_linux:3::es krb5-server 0:1.2.7-61
Red Hat · RHEL 3 enterprise_linux:3::es krb5-workstation 0:1.2.7-61
Red Hat · RHEL 3 enterprise_linux:3::ws krb5 0:1.2.7-61
Red Hat · RHEL 3 enterprise_linux:3::ws krb5-debuginfo 0:1.2.7-61
Red Hat · RHEL 3 enterprise_linux:3::ws krb5-devel 0:1.2.7-61
Red Hat · RHEL 3 enterprise_linux:3::ws krb5-libs 0:1.2.7-61
Red Hat · RHEL 3 enterprise_linux:3::ws krb5-server 0:1.2.7-61
Red Hat · RHEL 3 enterprise_linux:3::ws krb5-workstation 0:1.2.7-61
Red Hat · RHEL 4 enterprise_linux:4::as krb5 0:1.3.4-46
Red Hat · RHEL 4 enterprise_linux:4::as krb5-debuginfo 0:1.3.4-46
Red Hat · RHEL 4 enterprise_linux:4::as krb5-devel 0:1.3.4-46
Red Hat · RHEL 4 enterprise_linux:4::as krb5-libs 0:1.3.4-46
Red Hat · RHEL 4 enterprise_linux:4::as krb5-server 0:1.3.4-46
Red Hat · RHEL 4 enterprise_linux:4::as krb5-workstation 0:1.3.4-46
Red Hat · RHEL 4 enterprise_linux:4::desktop krb5 0:1.3.4-46
Red Hat · RHEL 4 enterprise_linux:4::desktop krb5-debuginfo 0:1.3.4-46
Red Hat · RHEL 4 enterprise_linux:4::desktop krb5-devel 0:1.3.4-46
Red Hat · RHEL 4 enterprise_linux:4::desktop krb5-libs 0:1.3.4-46
Red Hat · RHEL 4 enterprise_linux:4::desktop krb5-server 0:1.3.4-46
Red Hat · RHEL 4 enterprise_linux:4::desktop krb5-workstation 0:1.3.4-46
Red Hat · RHEL 4 enterprise_linux:4::es krb5 0:1.3.4-46
Red Hat · RHEL 4 enterprise_linux:4::es krb5-debuginfo 0:1.3.4-46
Red Hat · RHEL 4 enterprise_linux:4::es krb5-devel 0:1.3.4-46
Red Hat · RHEL 4 enterprise_linux:4::es krb5-libs 0:1.3.4-46
Red Hat · RHEL 4 enterprise_linux:4::es krb5-server 0:1.3.4-46
Red Hat · RHEL 4 enterprise_linux:4::es krb5-workstation 0:1.3.4-46
Red Hat · RHEL 4 enterprise_linux:4::ws krb5 0:1.3.4-46
Red Hat · RHEL 4 enterprise_linux:4::ws krb5-debuginfo 0:1.3.4-46
Red Hat · RHEL 4 enterprise_linux:4::ws krb5-devel 0:1.3.4-46
Red Hat · RHEL 4 enterprise_linux:4::ws krb5-libs 0:1.3.4-46
Red Hat · RHEL 4 enterprise_linux:4::ws krb5-server 0:1.3.4-46
Red Hat · RHEL 4 enterprise_linux:4::ws krb5-workstation 0:1.3.4-46
Red Hat · RHEL 5 enterprise_linux:5::client krb5 0:1.5-23
Red Hat · RHEL 5 enterprise_linux:5::client krb5-debuginfo 0:1.5-23
Red Hat · RHEL 5 enterprise_linux:5::client krb5-libs 0:1.5-23
Red Hat · RHEL 5 enterprise_linux:5::client krb5-workstation 0:1.5-23
Red Hat · RHEL 5 enterprise_linux:5::client_workstation krb5 0:1.5-23
Red Hat · RHEL 5 enterprise_linux:5::client_workstation krb5-debuginfo 0:1.5-23
Red Hat · RHEL 5 enterprise_linux:5::client_workstation krb5-devel 0:1.5-23
Red Hat · RHEL 5 enterprise_linux:5::client_workstation krb5-server 0:1.5-23
Red Hat · RHEL 5 enterprise_linux:5::server krb5 0:1.5-23
Red Hat · RHEL 5 enterprise_linux:5::server krb5-debuginfo 0:1.5-23
Red Hat · RHEL 5 enterprise_linux:5::server krb5-devel 0:1.5-23
Red Hat · RHEL 5 enterprise_linux:5::server krb5-libs 0:1.5-23
Red Hat · RHEL 5 enterprise_linux:5::server krb5-server 0:1.5-23
Red Hat · RHEL 5 enterprise_linux:5::server krb5-workstation 0:1.5-23

Vulnerabilities 3

  • Unscored —
    CVE-2007-0956 EPSS 30%

    The telnet daemon (telnetd) in MIT krb5 before 1.6.1 allows remote attackers to bypass authentication and gain system a…

  • Unscored —
    CVE-2007-0957 EPSS 10%

    Stack-based buffer overflow in the krb5_klog_syslog function in the kadm5 library, as used by the Kerberos administrati…

  • Unscored —

    Double free vulnerability in the GSS-API library (lib/gssapi/krb5/k5unseal.c), as used by the Kerberos administration d…

References

  • article
    http://www.redhat.com/security/updates/classification/#critical
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=229782
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=231528
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=231537
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2007/rhsa-2007_0095.json
  • report
    https://access.redhat.com/security/cve/CVE-2007-0956
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2007-0956
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2007-0956
  • report
    https://access.redhat.com/security/cve/CVE-2007-0957
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2007-0957
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2007-0957
  • report
    https://access.redhat.com/security/cve/CVE-2007-1216
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2007-1216
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2007-1216