[krbdev.mit.edu #8767] git commit
Greg Hudson via RT <[email protected]>
| Newsgroups | gmane.comp.encryption.kerberos.bugs |
|---|---|
| Message-ID | <[email protected]> |
Remove incorrect KDC assertion The assertion in return_enc_padata() is reachable because kdc_make_s4u2self_rep() may have previously added encrypted padata. It is no longer necessary because the code uses add_pa_data_element() instead of allocating a new list. CVE-2018-20217: In MIT krb5 1.8 or later, an authenticated user who can obtain a TGT using an older encryption type (DES, DES3, or RC4) can cause an assertion failure in the KDC by sending an S4U2Self request. [[email protected]: rewrote commit message with CVE description] https://github.com/krb5/krb5/commit/94e5eda5bb94d1d44733a49c3d9b6d1e42c74def Author: Isaac Boukris <[email protected]> Committer: Greg Hudson <[email protected]> Commit: 94e5eda5bb94d1d44733a49c3d9b6d1e42c74def Branch: master src/kdc/kdc_preauth.c | 1 - src/tests/gssapi/t_s4u.py | 8 ++++++++ 2 files changed, 8 insertions(+), 1 deletions(-)