Skip to content
OpenAdvisories
Unscored RHSA-2007:0562 3 CVEs

Red Hat Security Advisory: krb5 security update

Published Sep 15, 2024 · Updated Jun 26, 2026

Ecosystem: Red Hat

Fixed packages 38

ReleasePackageFixed in
Red Hat · RHEL 4 enterprise_linux:4::as krb5 0:1.3.4-49
Red Hat · RHEL 4 enterprise_linux:4::as krb5-debuginfo 0:1.3.4-49
Red Hat · RHEL 4 enterprise_linux:4::as krb5-devel 0:1.3.4-49
Red Hat · RHEL 4 enterprise_linux:4::as krb5-libs 0:1.3.4-49
Red Hat · RHEL 4 enterprise_linux:4::as krb5-server 0:1.3.4-49
Red Hat · RHEL 4 enterprise_linux:4::as krb5-workstation 0:1.3.4-49
Red Hat · RHEL 4 enterprise_linux:4::desktop krb5 0:1.3.4-49
Red Hat · RHEL 4 enterprise_linux:4::desktop krb5-debuginfo 0:1.3.4-49
Red Hat · RHEL 4 enterprise_linux:4::desktop krb5-devel 0:1.3.4-49
Red Hat · RHEL 4 enterprise_linux:4::desktop krb5-libs 0:1.3.4-49
Red Hat · RHEL 4 enterprise_linux:4::desktop krb5-server 0:1.3.4-49
Red Hat · RHEL 4 enterprise_linux:4::desktop krb5-workstation 0:1.3.4-49
Red Hat · RHEL 4 enterprise_linux:4::es krb5 0:1.3.4-49
Red Hat · RHEL 4 enterprise_linux:4::es krb5-debuginfo 0:1.3.4-49
Red Hat · RHEL 4 enterprise_linux:4::es krb5-devel 0:1.3.4-49
Red Hat · RHEL 4 enterprise_linux:4::es krb5-libs 0:1.3.4-49
Red Hat · RHEL 4 enterprise_linux:4::es krb5-server 0:1.3.4-49
Red Hat · RHEL 4 enterprise_linux:4::es krb5-workstation 0:1.3.4-49
Red Hat · RHEL 4 enterprise_linux:4::ws krb5 0:1.3.4-49
Red Hat · RHEL 4 enterprise_linux:4::ws krb5-debuginfo 0:1.3.4-49
Red Hat · RHEL 4 enterprise_linux:4::ws krb5-devel 0:1.3.4-49
Red Hat · RHEL 4 enterprise_linux:4::ws krb5-libs 0:1.3.4-49
Red Hat · RHEL 4 enterprise_linux:4::ws krb5-server 0:1.3.4-49
Red Hat · RHEL 4 enterprise_linux:4::ws krb5-workstation 0:1.3.4-49
Red Hat · RHEL 5 enterprise_linux:5::client krb5 0:1.5-26
Red Hat · RHEL 5 enterprise_linux:5::client krb5-debuginfo 0:1.5-26
Red Hat · RHEL 5 enterprise_linux:5::client krb5-libs 0:1.5-26
Red Hat · RHEL 5 enterprise_linux:5::client krb5-workstation 0:1.5-26
Red Hat · RHEL 5 enterprise_linux:5::client_workstation krb5 0:1.5-26
Red Hat · RHEL 5 enterprise_linux:5::client_workstation krb5-debuginfo 0:1.5-26
Red Hat · RHEL 5 enterprise_linux:5::client_workstation krb5-devel 0:1.5-26
Red Hat · RHEL 5 enterprise_linux:5::client_workstation krb5-server 0:1.5-26
Red Hat · RHEL 5 enterprise_linux:5::server krb5 0:1.5-26
Red Hat · RHEL 5 enterprise_linux:5::server krb5-debuginfo 0:1.5-26
Red Hat · RHEL 5 enterprise_linux:5::server krb5-devel 0:1.5-26
Red Hat · RHEL 5 enterprise_linux:5::server krb5-libs 0:1.5-26
Red Hat · RHEL 5 enterprise_linux:5::server krb5-server 0:1.5-26
Red Hat · RHEL 5 enterprise_linux:5::server krb5-workstation 0:1.5-26

Vulnerabilities 3

  • Unscored —
    CVE-2007-2442 EPSS 11%

    The gssrpc__svcauth_gssapi function in the RPC library in MIT Kerberos 5 (krb5) 1.6.1 and earlier might allow remote at…

    krb5 Debian
  • Unscored —
    CVE-2007-2443

    Integer signedness error in the gssrpc__svcauth_unix function in svc_auth_unix.c in the RPC library in MIT Kerberos 5 (…

    krb5 Debian
  • Unscored —
    CVE-2007-2798

    Stack-based buffer overflow in the rename_principal_2_svc function in kadmind for MIT Kerberos 1.5.3, 1.6.1, and other …

    krb5 Debian

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=245547
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=245548
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=245549
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2007/rhsa-2007_0562.json
  • report
    https://access.redhat.com/security/cve/CVE-2007-2442
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2007-2442
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2007-2442
  • report
    https://access.redhat.com/security/cve/CVE-2007-2443
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2007-2443
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2007-2443
  • report
    https://access.redhat.com/security/cve/CVE-2007-2798
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2007-2798
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2007-2798