Skip to content
OpenAdvisories
Unscored RHSA-2008:0164 5 CVEs

Red Hat Security Advisory: krb5 security and bugfix update

Published Sep 15, 2024 · Updated Jun 26, 2026

Ecosystem: Red Hat

Fixed packages 14

ReleasePackageFixed in
Red Hat · RHEL 5 enterprise_linux:5::client krb5 0:1.6.1-17.el5_1.1
Red Hat · RHEL 5 enterprise_linux:5::client krb5-debuginfo 0:1.6.1-17.el5_1.1
Red Hat · RHEL 5 enterprise_linux:5::client krb5-libs 0:1.6.1-17.el5_1.1
Red Hat · RHEL 5 enterprise_linux:5::client krb5-workstation 0:1.6.1-17.el5_1.1
Red Hat · RHEL 5 enterprise_linux:5::client_workstation krb5 0:1.6.1-17.el5_1.1
Red Hat · RHEL 5 enterprise_linux:5::client_workstation krb5-debuginfo 0:1.6.1-17.el5_1.1
Red Hat · RHEL 5 enterprise_linux:5::client_workstation krb5-devel 0:1.6.1-17.el5_1.1
Red Hat · RHEL 5 enterprise_linux:5::client_workstation krb5-server 0:1.6.1-17.el5_1.1
Red Hat · RHEL 5 enterprise_linux:5::server krb5 0:1.6.1-17.el5_1.1
Red Hat · RHEL 5 enterprise_linux:5::server krb5-debuginfo 0:1.6.1-17.el5_1.1
Red Hat · RHEL 5 enterprise_linux:5::server krb5-devel 0:1.6.1-17.el5_1.1
Red Hat · RHEL 5 enterprise_linux:5::server krb5-libs 0:1.6.1-17.el5_1.1
Red Hat · RHEL 5 enterprise_linux:5::server krb5-server 0:1.6.1-17.el5_1.1
Red Hat · RHEL 5 enterprise_linux:5::server krb5-workstation 0:1.6.1-17.el5_1.1

Vulnerabilities 5

  • Unscored —
    CVE-2007-5901

    Use-after-free vulnerability in the gss_indicate_mechs function in lib/gssapi/mechglue/g_initialize.c in MIT Kerberos 5…

    krb5 Debian
  • Unscored —
    CVE-2007-5971

    Double free vulnerability in the gss_krb5int_make_seal_token_v3 function in lib/gssapi/krb5/k5sealv3.c in MIT Kerberos …

    krb5 Debian
  • Unscored —
    CVE-2008-0062 EPSS 10%

    KDC in MIT Kerberos 5 (krb5kdc) does not set a global variable for some krb4 message types, which allows remote attacke…

    krb5 Debian
  • Unscored —
    CVE-2008-0063

    The Kerberos 4 support in KDC in MIT Kerberos 5 (krb5kdc) does not properly clear the unused portion of a buffer when g…

    krb5 Debian
  • Unscored —
    CVE-2008-0947

    Buffer overflow in the RPC library used by libgssrpc and kadmind in MIT Kerberos 5 (krb5) 1.4 through 1.6.3 allows remo…

    krb5 Debian

References

  • article
    https://access.redhat.com/security/updates/classification/#critical
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=415321
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=415351
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=432620
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=432621
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=433596
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=436460
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=436465
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=436467
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=436468
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=436470
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0164.json
  • report
    https://access.redhat.com/security/cve/CVE-2007-5901
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2007-5901
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2007-5901
  • report
    https://access.redhat.com/security/cve/CVE-2007-5971
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2007-5971
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2007-5971
  • report
    https://access.redhat.com/security/cve/CVE-2008-0062
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-0062
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-0062
  • report
    https://access.redhat.com/security/cve/CVE-2008-0063
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-0063
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-0063
  • report
    https://access.redhat.com/security/cve/CVE-2008-0947
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-0947
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-0947