Download
| Alert*
oval:org.secpod.oval:def:506346
Kerberos is a network authentication system, which can improve the security of your network by eliminating the insecure practice of sending passwords over the network in unencrypted form. It allows clients and servers to authenticate to each other with the help of a trusted third party, the Kerberos ... oval:org.secpod.oval:def:120464 Kerberos V5 is a trusted-third-party network authentication system, which can improve your networks security by eliminating the insecure practice of sending passwords over the network in unencrypted form. oval:org.secpod.oval:def:120448 Kerberos V5 is a trusted-third-party network authentication system, which can improve your networks security by eliminating the insecure practice of sending passwords over the network in unencrypted form. oval:org.secpod.oval:def:89045552 This update for krb5 fixes the following issues: - CVE-2021-36222: Fixed KDC null deref on bad encrypted challenge oval:org.secpod.oval:def:2107058 Oracle Solaris 11 - ( CVE-2021-36222 ) oval:org.secpod.oval:def:89047087 This update for krb5 fixes the following issues: - CVE-2021-36222: Fixed KDC null deref on bad encrypted challenge oval:org.secpod.oval:def:605583 It was discovered that the Key Distribution Center in krb5, the MIT implementation of Kerberos, is prone to a NULL pointer dereference flaw. An unauthenticated attacker can take advantage of this flaw to cause a denial of service by sending a request containing a PA-ENCRYPTED-CHALLENGE padata elem ... oval:org.secpod.oval:def:74232 It was discovered that the Key Distribution Center in libkrb5-dev, the MIT implementation of Kerberos, is prone to a NULL pointer dereference flaw. An unauthenticated attacker can take advantage of this flaw to cause a denial of service by sending a request containing a PA-ENCRYPTED-CHALLENGE pada ... oval:org.secpod.oval:def:89047488 - CVE-2021-44141: Information leak via symlinks of existance of files or directories outside of the exported share; ; ; - CVE-2021-44142: Out-of-bounds heap read/write vulnerability in VFS module vfs_fruit allows code execution; ; ; - CVE-2022-0336: Samba AD users with permission to write to an acco ... oval:org.secpod.oval:def:3300522 SUSE Security Update: Security update for SUSE Manager Client Tools oval:org.secpod.oval:def:89046411 This update fixes the following issues: golang-github-QubitProducts-exporter_exporter: - Adapted to build on Enterprise Linux. - Fix build for RedHat 7 - Require Go = 1.14 also for CentOS - Add support for CentOS - Replace %{?systemd_requires} with %{?systemd_ordering} golang-github-prometheus-alert ... oval:org.secpod.oval:def:75901 Kerberos is a network authentication system, which can improve the security of your network by eliminating the insecure practice of sending passwords over the network in unencrypted form. It allows clients and servers to authenticate to each other with the help of a trusted third party, the Kerberos ... oval:org.secpod.oval:def:1505130 [1.18.2-8.3] - Fix KDC null deref on TGS inner body null server - Resolves: #1997600 [1.18.2-8.2] - Rebuild for rpminspect; no code changes - Resolves: #1983728 [1.18.2-8.1] - Fix KDC null deref on bad encrypted challenge - Resolves: #1983728 oval:org.secpod.oval:def:2500299 Kerberos is a network authentication system, which can improve the security of your network by eliminating the insecure practice of sending passwords over the network in unencrypted form. It allows clients and servers to authenticate to each other with the help of a trusted third party, the Kerberos ... oval:org.secpod.oval:def:89500 krb5: MIT Kerberos Network Authentication Protocol Several security issues were fixed in Kerberos. oval:org.secpod.oval:def:708034 krb5: MIT Kerberos Network Authentication Protocol Several security issues were fixed in Kerberos. oval:org.secpod.oval:def:3300621 SUSE Security Update: Security update for SUSE Manager Client Tools oval:org.secpod.oval:def:3300690 SUSE Security Update: Security update for grafana oval:org.secpod.oval:def:75467 The host is installed with Oracle MySQL Server through 8.0.26 and is prone to an unspecified vulnerability. A flaw is present in the application, which fails to handle vectors related to Server: Compiling (Kerberos). Successful exploitation allows attackers to affect Availability. |