mirror of
git://git.openembedded.org/meta-openembedded
synced 2026-08-11 07:28:56 +00:00
This is CVE-2016-3120 The validate_as_request function in kdc_util.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.13.6 and 1.4.x before 1.14.3, when restrict_anonymous_to_tgt is enabled, uses an incorrect client data structure, which allows remote authenticated users to cause a denial of service (NULL pointer dereference and daemon crash) via an S4U2Self request. Signed-off-by: Alexandru Moise <alexandru.moise@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Collection of layers for the OE-core universe Please see the respective READMEs in the layer subdirectories
Description
Languages
BitBake
85.5%
Shell
6.1%
C
3%
Roff
2.1%
NASL
1.9%
Other
1.1%