Scheduled maintenance: Some features related to account registration and licensing may be temporarily unavailable from Friday (May 8) at 1 PM to Sunday (May 10) at 5 PM (PST).
HomeDefectsLIN8-2744
Fixed

LIN8-2744 : Security Advisory - krb5 - CVE-2015-8631

Created: Feb 13, 2016    Updated: Dec 3, 2018
Resolved Date: Mar 20, 2016
Found In Version: 8.0
Fix Version: 8.0.0.4
Severity: Standard
Applicable for: Wind River Linux 8
Component/s: Userspace

Description

Multiple memory leaks in kadmin/server/server_stubs.c in kadmind in MIT Kerberos 5 (aka krb5) before 1.13.4 and 1.14.x before 1.14.1 allow remote authenticated users to cause a denial of service (memory consumption) via a request specifying a NULL principal name.

http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-8631

Other Downloads


CVEs