VDB

GCVE-110-MAGEIA-2021-110

GCVE-110-MAGEIA-2021-110
Advisory Published
Vulnetix · Advisory published March 4, 2021
A buffer overflow vulnerability was discovered in the SPNEGO implementation affecting the GSSAPI security policy negotiation in BIND, which could result in denial of service (daemon crash), or potentially the execution of arbitrary code (CVE-2020-8625). The default configuration is not vulnerable to this issue, but it is if the tkey-gssapi-keytab or tkey-gssapi-credentialconfiguration options are set.

Affected Products

VendorProductVersionsPlatforms
Mageiabind0 (affected), 9.11.6-1.3.mga7 (unaffected)—
Mageiabind0 (affected), 9.11.27-1.1.mga8 (unaffected)—

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

$ Console Community · 50/day Open console ›