oval:org.mitre.oval:def:23680

Definition Id: oval:org.mitre.oval:def:23680

Oval ID:	oval:org.mitre.oval:def:23680
Title:	ELSA-2013:0656: krb5 security update (Moderate)
Description:	The pkinit_check_kdc_pkid function in plugins/preauth/pkinit/pkinit_crypto_openssl.c in the PKINIT implementation in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.10.4 and 1.11.x before 1.11.1 does not properly handle errors during extraction of fields from an X.509 certificate, which allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a malformed KRB5_PADATA_PK_AS_REQ AS-REQ request.
Family:	unix	Class:	patch
Reference(s):	ELSA-2013:0656-01 CVE-2012-1016 CVE-2013-1415	Version:	13
Platform(s):	Oracle Linux 6	Product(s):	krb5
Definition Synopsis:
Oracle Linux 6.x rpm test krb5-devel is earlier than 0:1.10.3-10.el6_4.1 AND krb5-server-ldap is earlier than 0:1.10.3-10.el6_4.1 AND krb5-workstation is earlier than 0:1.10.3-10.el6_4.1 AND krb5-libs is earlier than 0:1.10.3-10.el6_4.1 AND krb5-pkinit-openssl is earlier than 0:1.10.3-10.el6_4.1 AND krb5-server is earlier than 0:1.10.3-10.el6_4.1 AND krb5 is earlier than 0:1.10.3-10.el6_4.1

Definition Id: oval:org.mitre.oval:def:16594

Oval ID:	oval:org.mitre.oval:def:16594
Title:	Oracle Linux 6.x
Description:	The operating system installed on the system is Oracle Linux 6.x
Family:	unix	Class:	inventory
Reference(s):	cpe:/o:oracle:linux:6	Version:	5
Platform(s):	Oracle Linux 6	Product(s):
Definition Synopsis:
the installed operating system is part of the Unix family AND Oracle Linux 6.x is installed
Referenced By:
oval:org.mitre.oval:def:23680