SUSE-SU-2022:4154-1
Not scored
Security update for krb5
This update for krb5 fixes the following issues: - CVE-2021-37750: Fixed KDC null pointer dereference via a FAST inner body that lacks a server field (bsc#1189929). - CVE-2022-42898: Fixed integer overflow in PAC parsing (bsc#1205126).
Exploit probability
Not scored
Published
November 21, 2022
Required by
Not available
Last source change
May 2, 2025
02 / AFFECTED SOFTWARE
Affected packages
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
Open Source Vulnerabilities
SUSE-SU-2022:4154-1
View original source
This update for krb5 fixes the following issues: - CVE-2021-37750: Fixed KDC null pointer dereference via a FAST inner body that lacks a server field (bsc#1189929). - CVE-2022-42898: Fixed integer overflow in PAC parsing (bsc#1205126).
05 / REFERENCES