6.5
Medium
CVE-2017-7562 An authentication bypass flaw was found in the way krb5's certauth interface before 1.16.1 handled the validation of…
Description
An authentication bypass flaw was found in the way krb5's certauth interface before 1.16.1 handled the validation of client certificates. A remote attacker able to communicate with the KDC could potentially use this flaw to impersonate arbitrary principals under rare and erroneous circumstances.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| krb5 | 1.16.1 | No fix stated |
References
- github.com github.com
- 100511 www.securityfocus.com
- github.com github.com
- github.com github.com
- RHSA-2018:0666 access.redhat.com
- github.com github.com
- bugzilla.redhat.com bugzilla.redhat.com
Timeline
- Published
- Last modified
Other CVEs of krb5
The 4 CVEs of krb5 →
CVE-2026-107778
MIT Kerberos 5 (krb5) through 1.22.2 contains a NULL pointer dereference in make_cred_list() in rd_cred.c that allows…
7.1
High
CVE-2026-107708
MIT krb5 through 1.22.2 contains a NULL pointer dereference vulnerability in the KDC's get_pac_princ_with_realm() that…
6.9
Medium
CVE-2019-14844
A flaw was found in, Fedora versions of krb5 from 1.16.1 to, including 1.17.x, in the way a Kerberos client could…
7.5
High