CVE-2008-0063
Fixed in a distro release EPSS 3%
The Kerberos 4 support in KDC in MIT Kerberos 5 (krb5kdc) does not properly clear the unused portion of a buffer when generating an error message, which might allow remote attackers to obtain sensitive information, aka "Uninitialized stack values."
Products: mit kerberos_5, apple mac_os_x, apple mac_os_x_server, opensuse, suse linux, suse linux_enterprise_desktop, suse linux_enterprise_server, suse linux_enterprise_software_development_kit, debian_linux, canonical ubuntu_linux, fedoraproject fedora
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | krb5 | 1.6.dfsg.3~beta1-4 |
| Debian 13 | krb5 | 1.6.dfsg.3~beta1-4 |
| Debian 14 | krb5 | 1.6.dfsg.3~beta1-4 |
| Debian 3.1 | krb5 | 1.3.6-2sarge6 |
| Debian 4.0 | krb5 | 1.4.4-7etch5 |
| Red Hat Enterprise Linux 2.1 | krb5 | 0:1.2.2-48 |
| Red Hat Enterprise Linux 2.1 | krb5-devel | 0:1.2.2-48 |
| Red Hat Enterprise Linux 2.1 | krb5-libs | 0:1.2.2-48 |
| Red Hat Enterprise Linux 2.1 | krb5-server | 0:1.2.2-48 |
| Red Hat Enterprise Linux 2.1 | krb5-workstation | 0:1.2.2-48 |
| Red Hat Enterprise Linux 3 | krb5 | 0:1.2.7-68 |
| Red Hat Enterprise Linux 3 | krb5-debuginfo | 0:1.2.7-68 |
| Red Hat Enterprise Linux 3 | krb5-devel | 0:1.2.7-68 |
| Red Hat Enterprise Linux 3 | krb5-libs | 0:1.2.7-68 |
| Red Hat Enterprise Linux 3 | krb5-server | 0:1.2.7-68 |
| Red Hat Enterprise Linux 3 | krb5-workstation | 0:1.2.7-68 |
| Red Hat Enterprise Linux 4 | krb5 | 0:1.3.4-54.el4_6.1 |
| Red Hat Enterprise Linux 4 | krb5-debuginfo | 0:1.3.4-54.el4_6.1 |
| Red Hat Enterprise Linux 4 | krb5-devel | 0:1.3.4-54.el4_6.1 |
| Red Hat Enterprise Linux 4 | krb5-libs | 0:1.3.4-54.el4_6.1 |
| Red Hat Enterprise Linux 4 | krb5-server | 0:1.3.4-54.el4_6.1 |
| Red Hat Enterprise Linux 4 | krb5-workstation | 0:1.3.4-54.el4_6.1 |
| Red Hat Enterprise Linux 5 | krb5 | 0:1.6.1-17.el5_1.1 |
| Red Hat Enterprise Linux 5 | krb5-debuginfo | 0:1.6.1-17.el5_1.1 |
| Red Hat Enterprise Linux 5 | krb5-devel | 0:1.6.1-17.el5_1.1 |
| Red Hat Enterprise Linux 5 | krb5-libs | 0:1.6.1-17.el5_1.1 |
| Red Hat Enterprise Linux 5 | krb5-server | 0:1.6.1-17.el5_1.1 |
| Red Hat Enterprise Linux 5 | krb5-workstation | 0:1.6.1-17.el5_1.1 |
| Red Hat rhel eus 4.5 | krb5 | 0:1.3.4-49.el4_5.1 |
| Red Hat rhel eus 4.5 | krb5-debuginfo | 0:1.3.4-49.el4_5.1 |
| Red Hat rhel eus 4.5 | krb5-devel | 0:1.3.4-49.el4_5.1 |
| Red Hat rhel eus 4.5 | krb5-libs | 0:1.3.4-49.el4_5.1 |
| Red Hat rhel eus 4.5 | krb5-server | 0:1.3.4-49.el4_5.1 |
| Red Hat rhel eus 4.5 | krb5-workstation | 0:1.3.4-49.el4_5.1 |