CVE-2015-8630

Related Files

Red Hat Security Advisory 2016-0532-01

Posted Apr 4, 2016

Authored by Red Hat | Site access.redhat.com

Red Hat Security Advisory 2016-0532-01 - Kerberos is a network authentication system, which can improve the security of your network by eliminating the insecure practice of sending passwords over the network in unencrypted form. It allows clients and servers to authenticate to each other with the help of a trusted third party, the Kerberos key distribution center. Security Fix: A memory leak flaw was found in the krb5_unparse_name() function of the MIT Kerberos kadmind service. An authenticated attacker could repeatedly send specially crafted requests to the server, which could cause the server to consume large amounts of memory resources, ultimately leading to a denial of service due to memory exhaustion.

tags | advisory, denial of service, memory leak

systems | linux, redhat

advisories | CVE-2015-8629, CVE-2015-8630, CVE-2015-8631

SHA-256 | 7923c4a26bd8eaff6297576d2f1e25328457dfe3d9715a4441a96cf23a30904c

Download | Favorite | View

Debian Security Advisory 3466-1

Posted Feb 5, 2016

Authored by Debian | Site debian.org

Debian Linux Security Advisory 3466-1 - Several vulnerabilities were discovered in krb5, the MIT implementation of Kerberos.

tags | advisory, vulnerability

systems | linux, debian

advisories | CVE-2015-8629, CVE-2015-8630, CVE-2015-8631

SHA-256 | 8882f3771f374aeae0da22fa5be2ecfc575458e8af94616bd1d91c5669e26a89

Download | Favorite | View