Skip to content
OpenAdvisories
Unscored RHSA-2014:1245 4 CVEs

Red Hat Security Advisory: krb5 security and bug fix update

Published Sep 15, 2024 · Updated Jun 28, 2026

Ecosystem: Red Hat

Fixed packages 16

ReleasePackageFixed in
Red Hat · RHEL 5 enterprise_linux:5::client krb5 0:1.6.1-78.el5
Red Hat · RHEL 5 enterprise_linux:5::client krb5-debuginfo 0:1.6.1-78.el5
Red Hat · RHEL 5 enterprise_linux:5::client krb5-libs 0:1.6.1-78.el5
Red Hat · RHEL 5 enterprise_linux:5::client krb5-workstation 0:1.6.1-78.el5
Red Hat · RHEL 5 enterprise_linux:5::client_workstation krb5 0:1.6.1-78.el5
Red Hat · RHEL 5 enterprise_linux:5::client_workstation krb5-debuginfo 0:1.6.1-78.el5
Red Hat · RHEL 5 enterprise_linux:5::client_workstation krb5-devel 0:1.6.1-78.el5
Red Hat · RHEL 5 enterprise_linux:5::client_workstation krb5-server 0:1.6.1-78.el5
Red Hat · RHEL 5 enterprise_linux:5::client_workstation krb5-server-ldap 0:1.6.1-78.el5
Red Hat · RHEL 5 enterprise_linux:5::server krb5 0:1.6.1-78.el5
Red Hat · RHEL 5 enterprise_linux:5::server krb5-debuginfo 0:1.6.1-78.el5
Red Hat · RHEL 5 enterprise_linux:5::server krb5-devel 0:1.6.1-78.el5
Red Hat · RHEL 5 enterprise_linux:5::server krb5-libs 0:1.6.1-78.el5
Red Hat · RHEL 5 enterprise_linux:5::server krb5-server 0:1.6.1-78.el5
Red Hat · RHEL 5 enterprise_linux:5::server krb5-server-ldap 0:1.6.1-78.el5
Red Hat · RHEL 5 enterprise_linux:5::server krb5-workstation 0:1.6.1-78.el5

Vulnerabilities 4

  • Unscored —
    CVE-2013-1418

    The setup_server_realm function in main.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.10…

    krb5 Debian
  • Unscored —
    CVE-2013-6800

    An unspecified third-party database module for the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.10.x al…

  • Unscored —
    CVE-2014-4341

    MIT Kerberos 5 (aka krb5) before 1.12.2 allows remote attackers to cause a denial of service (buffer over-read and appl…

    krb5 krb5 Debian Ubuntu
  • Unscored —
    CVE-2014-4344

    The acc_ctx_cont function in the SPNEGO acceptor in lib/gssapi/spnego/spnego_mech.c in MIT Kerberos 5 (aka krb5) 1.5.x …

    krb5 krb5 Debian Ubuntu

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1026942
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1031499
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1116180
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1121877
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_1245.json
  • report
    https://access.redhat.com/security/cve/CVE-2013-1418
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2013-1418
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2013-1418
  • report
    https://access.redhat.com/security/cve/CVE-2013-6800
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2013-6800
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2013-6800
  • report
    https://access.redhat.com/security/cve/CVE-2014-4341
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-4341
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-4341
  • report
    https://access.redhat.com/security/cve/CVE-2014-4344
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-4344
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-4344