VDB

GCVE-110-MAGEIA-2022-467

GCVE-110-MAGEIA-2022-467
Advisory Published
Vulnetix · Advisory published December 17, 2022
Greg Hudson discovered integer overflow flaws in the PAC parsing in krb5, the MIT implementation of Kerberos, which may result in remote code execution (in a KDC, kadmin, or GSS or Kerberos application server process), information exposure (to a cross-realm KDC acting maliciously), or denial of service (KDC or kadmind process crash).
Download JSON Open in Console

Affected Products

VendorProductVersionsPlatforms
Mageiakrb51.18.3-1.3.mga8 (unaffected), 0 (affected)—

Aliases

CVE-2022-42898

References

Updated krb5 packages fix security vulnerability
advisory
Updated krb5 packages fix security vulnerability
advisory
Updated krb5 packages fix security vulnerability
issue
Updated krb5 packages fix security vulnerability
issue
Updated krb5 packages fix security vulnerability
issue

Browse GCVE Records

73,393 records in the GCVE database · Updated July 17, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON
$ Console Community · 100/wk Open console ›