mirror of
https://github.com/thead-yocto-mirror/meta-openembedded
synced 2026-10-05 01:15:51 +02:00
19dc7117fd0e95d1477eb5797fbe2a3cca8f7760
This is CVE-2016-3120 The validate_as_request function in kdc_util.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.13.6 and 1.4.x before 1.14.3, when restrict_anonymous_to_tgt is enabled, uses an incorrect client data structure, which allows remote authenticated users to cause a denial of service (NULL pointer dereference and daemon crash) via an S4U2Self request. Signed-off-by: Alexandru Moise <alexandru.moise@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Collection of layers for the OE-core universe Please see the respective READMEs in the layer subdirectories
Languages
BitBake
71.6%
C
17.6%
Shell
7.5%
Python
1%
Makefile
0.9%
Other
1.3%