REDHAT-BUG-2266740: Low severity kerberos vulnerability
Published Feb 28, 2024
·Updated
Kerberos 5 (aka krb5) 1.21.2 contains a memory leak vulnerability in /krb5/src/lib/gssapi/krb5/k5sealv3.c.
References:
https://github.com/LuMingYinDetect/krb5defects/blob/main/krb5detect2.md
Affected Software
1 affected component
MIT Kerberos 5
Event History
Feb 28, 2024
Data Sourced
via Red Hat·09:14 PM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of REDHAT-BUG-2266740?
The severity of REDHAT-BUG-2266740 is classified as a memory leak vulnerability.
2
How do I fix REDHAT-BUG-2266740?
To fix REDHAT-BUG-2266740, update to the latest version of Kerberos 5 that addresses this vulnerability.
3
What is the impact of REDHAT-BUG-2266740?
The impact of REDHAT-BUG-2266740 includes potential resource exhaustion due to memory leaks.
4
Which software is affected by REDHAT-BUG-2266740?
The affected software for REDHAT-BUG-2266740 is MIT Kerberos 5.
5
When was REDHAT-BUG-2266740 reported?
REDHAT-BUG-2266740 was reported in the context of Kerberos 5 version 1.21.2.