Skip to content
OpenAdvisories
Medium RHSA-2018:0666 2 CVEs

Red Hat Security Advisory: krb5 security, bug fix, and enhancement update

Published Sep 16, 2024 · Updated Aug 5, 2026

Ecosystem: Red Hat

Fixed packages 36

ReleasePackageFixed in
Red Hat · RHEL 7 enterprise_linux:7::client krb5 0:1.15.1-18.el7
Red Hat · RHEL 7 enterprise_linux:7::client krb5-debuginfo 0:1.15.1-18.el7
Red Hat · RHEL 7 enterprise_linux:7::client krb5-devel 0:1.15.1-18.el7
Red Hat · RHEL 7 enterprise_linux:7::client krb5-libs 0:1.15.1-18.el7
Red Hat · RHEL 7 enterprise_linux:7::client krb5-pkinit 0:1.15.1-18.el7
Red Hat · RHEL 7 enterprise_linux:7::client krb5-server 0:1.15.1-18.el7
Red Hat · RHEL 7 enterprise_linux:7::client krb5-server-ldap 0:1.15.1-18.el7
Red Hat · RHEL 7 enterprise_linux:7::client krb5-workstation 0:1.15.1-18.el7
Red Hat · RHEL 7 enterprise_linux:7::client libkadm5 0:1.15.1-18.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode krb5 0:1.15.1-18.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode krb5-debuginfo 0:1.15.1-18.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode krb5-devel 0:1.15.1-18.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode krb5-libs 0:1.15.1-18.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode krb5-pkinit 0:1.15.1-18.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode krb5-server 0:1.15.1-18.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode krb5-server-ldap 0:1.15.1-18.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode krb5-workstation 0:1.15.1-18.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode libkadm5 0:1.15.1-18.el7
Red Hat · RHEL 7 enterprise_linux:7::server krb5 0:1.15.1-18.el7
Red Hat · RHEL 7 enterprise_linux:7::server krb5-debuginfo 0:1.15.1-18.el7
Red Hat · RHEL 7 enterprise_linux:7::server krb5-devel 0:1.15.1-18.el7
Red Hat · RHEL 7 enterprise_linux:7::server krb5-libs 0:1.15.1-18.el7
Red Hat · RHEL 7 enterprise_linux:7::server krb5-pkinit 0:1.15.1-18.el7
Red Hat · RHEL 7 enterprise_linux:7::server krb5-server 0:1.15.1-18.el7
Red Hat · RHEL 7 enterprise_linux:7::server krb5-server-ldap 0:1.15.1-18.el7
Red Hat · RHEL 7 enterprise_linux:7::server krb5-workstation 0:1.15.1-18.el7
Red Hat · RHEL 7 enterprise_linux:7::server libkadm5 0:1.15.1-18.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation krb5 0:1.15.1-18.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation krb5-debuginfo 0:1.15.1-18.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation krb5-devel 0:1.15.1-18.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation krb5-libs 0:1.15.1-18.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation krb5-pkinit 0:1.15.1-18.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation krb5-server 0:1.15.1-18.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation krb5-server-ldap 0:1.15.1-18.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation krb5-workstation 0:1.15.1-18.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation libkadm5 0:1.15.1-18.el7

Vulnerabilities 2

  • Medium 6.5
    CVE-2017-7562

    An authentication bypass flaw was found in the way krb5's certauth interface before 1.16.1 handled the validation of cl…

    MIT krb5
  • Unscored —
    CVE-2017-11368

    In MIT Kerberos 5 (aka krb5) 1.7 and later, an authenticated attacker can cause a KDC assertion failure by sending inva…

    krb5 krb5 Debian Ubuntu

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • article
    https://access.redhat.com/documentation/en-US/red_hat_enterprise_linux/7/html/7.5_release_notes/index.html
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1431198
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1443388
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1462982
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1472956
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1473560
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1485510
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_0666.json
  • report
    https://access.redhat.com/security/cve/CVE-2017-7562
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2017-7562
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2017-7562
  • report
    https://access.redhat.com/security/cve/CVE-2017-11368
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2017-11368
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2017-11368