{"id":"MGASA-2022-0467","summary":"Updated krb5 packages fix security vulnerability","details":"Greg Hudson discovered integer overflow flaws in the PAC parsing in krb5,\nthe MIT implementation of Kerberos, which may result in remote code\nexecution (in a KDC, kadmin, or GSS or Kerberos application server\nprocess), information exposure (to a cross-realm KDC acting maliciously),\nor denial of service (KDC or kadmind process crash).\n","modified":"2026-04-16T04:41:16.461382728Z","published":"2022-12-17T18:48:08Z","upstream":["CVE-2022-42898"],"references":[{"type":"ADVISORY","url":"https://advisories.mageia.org/MGASA-2022-0467.html"},{"type":"REPORT","url":"https://bugs.mageia.org/show_bug.cgi?id=31157"},{"type":"WEB","url":"https://www.debian.org/security/2022/dsa-5286"},{"type":"WEB","url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/6I6MV4DA2O6D7LCUS6WJQRCLT5N3QXGX/"},{"type":"WEB","url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/KNFBR437JQZXMPIT2AJCTGKUTQAFEMBY/"}],"affected":[{"package":{"name":"krb5","ecosystem":"Mageia:8","purl":"pkg:rpm/mageia/krb5?arch=source&distro=mageia-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.3-1.3.mga8"}]}],"ecosystem_specific":{"section":"core"},"database_specific":{"source":"https://advisories.mageia.org/MGASA-2022-0467.json"}}],"schema_version":"1.7.5","credits":[{"name":"Mageia","contact":["https://wiki.mageia.org/en/Packages_Security_Team"],"type":"COORDINATOR"}]}