Oval Definition:	oval:org.mitre.oval:tst:38393
Comment: krb5 is earlier than 0:1.3.4-60.el4_7.2 Type: rpminfo_test Namespace: linux Check_Existence: at_least_one_exists Check: at least one State Operator: AND References Object: oval:org.mitre.oval:obj:14120 State: oval:org.mitre.oval:ste:11181 Referencing Definitions Definition ID Class Title Last Modified oval:org.mitre.oval:def:10694 V The asn1_decode_generaltime function in lib/krb5/asn.1/asn1_decode.c in the ASN.1 GeneralizedTime decoder in MIT Kerberos 5 (aka krb5) before 1.6.4 allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via vectors involving an invalid DER encoding that triggers a free of an uninitialized pointer. 2013-04-29
BACK