A security feature bypass vulnerability exists in the way Key Distribution Center (KDC) determines if a service ticket can be used for delegation via Kerberos Constrained Delegation (KCD). To exploit the vulnerability, a compromised service that is configured to use KCD could tamper with a service ticket that is not valid for delegation to force the KDC to accept it. The update addresses this vulnerability by changing how the KDC validates service tickets used with KCD.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade krb5-pkinitUpgrade ipa-healthcheck-coreUpgrade ipa-server-trust-adUpgrade ipa-selinuxUpgrade slapi-nisUpgrade python3-ipatestsUpgrade krb5-develUpgrade ipa-server-dnsUpgrade python3-qrcodeUpgrade python3-kdcproxyUpgrade krb5-libsUpgrade ipa-client-epnUpgrade ipa-healthcheckUpgrade python3-jwcryptoUpgrade ipa-python-compatUpgrade ipa-clientUpgrade krb5-server-ldapUpgrade ipa-serverUpgrade ipa-client-commonUpgrade bind-dyndb-ldapUpgrade softhsm-develUpgrade ipa-server-commonUpgrade custodiaUpgrade ipa-commonUpgrade opendnssecUpgrade python3-yubicoUpgrade libkadm5Upgrade softhsmUpgrade python3-pyusbUpgrade python3-ipalibUpgrade krb5-serverUpgrade krb5-workstationUpgrade python3-ipaserverUpgrade python3-qrcode-coreUpgrade python3-custodiaUpgrade python3-ipaclientUpgrade ipa-client-samba | May 15, 2023 | Nov 11, 2020 |
| Amazon_linux | — | Upgrade samba | Dec 10, 2022 | Nov 11, 2020 |
| Amazon_linux_2023 | — | Upgrade samba-clientUpgrade samba-ldb-ldap-modules-debuginfoUpgrade samba-winbind-krb5-locatorUpgrade samba-winbind-krb5-locator-debuginfoUpgrade samba-client-debuginfoUpgrade python3-samba-develUpgrade samba-dcerpcUpgrade samba-krb5-printingUpgrade libsmbclientUpgrade libnetapiUpgrade libwbclient-develUpgrade python3-sambaUpgrade python3-samba-debuginfoUpgrade samba-winbind-clients-debuginfoUpgrade samba-winbind-debuginfoUpgrade libwbclientUpgrade samba-dcerpc-debuginfoUpgrade samba-krb5-printing-debuginfoUpgrade samba-client-libsUpgrade samba-usersharesUpgrade samba-common-toolsUpgrade libsmbclient-develUpgrade samba-common-tools-debuginfoUpgrade samba-libsUpgrade samba-ldb-ldap-modulesUpgrade samba-test-debuginfoUpgrade samba-vfs-iouring-debuginfoUpgrade samba-winbindUpgrade samba-common-libsUpgrade samba-winbind-modulesUpgrade libnetapi-debuginfoUpgrade samba-libs-debuginfoUpgrade samba-dc-libs-debuginfoUpgrade samba-develUpgrade sambaUpgrade samba-common-libs-debuginfoUpgrade samba-client-libs-debuginfoUpgrade samba-winbind-clientsUpgrade samba-winbind-modules-debuginfoUpgrade samba-commonUpgrade samba-test-libs-debuginfoUpgrade libsmbclient-debuginfoUpgrade samba-vfs-iouringUpgrade samba-pidlUpgrade samba-testUpgrade libnetapi-develUpgrade samba-debugsourceUpgrade libwbclient-debuginfoUpgrade samba-test-libsUpgrade samba-dc-libsUpgrade samba-debuginfoUpgrade python3-samba-test | Feb 17, 2025 | Nov 10, 2020 |
| Centos_linux | — | Upgrade krb5-workstation-debuginfoUpgrade krb5-server-ldap-debuginfoUpgrade python3-ipatestsUpgrade ipa-debugsourceUpgrade krb5-server-ldapUpgrade python3-ipalibUpgrade krb5-debuginfoUpgrade krb5-debugsourceUpgrade python3-ipaclientUpgrade bind-dyndb-ldap-debugsourceUpgrade python3-ipaserverUpgrade ipa-healthcheck-coreUpgrade ipa-server-trust-ad-debuginfoUpgrade ipa-server-trust-adUpgrade krb5-pkinit-debuginfoUpgrade ipa-client-sambaUpgrade ipa-server-commonUpgrade ipa-healthcheckUpgrade softhsm-debuginfoUpgrade bind-dyndb-ldapUpgrade slapi-nis-debuginfoUpgrade ipa-selinuxUpgrade python3-qrcodeUpgrade custodiaUpgrade python3-kdcproxyUpgrade opendnssec-debugsourceUpgrade ipa-server-debuginfoUpgrade bind-dyndb-ldap-debuginfoUpgrade ipa-client-epnUpgrade ipa-client-commonUpgrade ipa-debuginfoUpgrade python3-yubicoUpgrade slapi-nisUpgrade slapi-nis-debugsourceUpgrade opendnssecUpgrade ipa-serverUpgrade libkadm5-debuginfoUpgrade libkadm5Upgrade krb5-libsUpgrade ipa-server-dnsUpgrade ipa-clientUpgrade python3-pyusbUpgrade krb5-develUpgrade ipa-client-debuginfoUpgrade softhsm-develUpgrade ipa-python-compatUpgrade python3-custodiaUpgrade softhsm-debugsourceUpgrade krb5-workstationUpgrade softhsmUpgrade krb5-libs-debuginfoUpgrade ipa-commonUpgrade python3-qrcode-coreUpgrade opendnssec-debuginfoUpgrade python3-jwcryptoUpgrade krb5-server-debuginfoUpgrade krb5-serverUpgrade krb5-pkinit | May 15, 2023 | Nov 11, 2020 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Sep 18, 2023 | Nov 11, 2020 |
| Msft | — | 2021-07 Cumulative Update for Windows Server, version 2004 for x64-based Systems (KB5004237)2021-04 Security Only Quality Update for Windows 8.1 for x86-based Systems (KB5001393)2021-04 Cumulative Update for Windows Server, version 2004 for x64-based Systems (KB5001330)2021-04 Security Only Quality Update for Windows Embedded 8 Standard for x64-based Systems (KB5001383)2021-07 Security Only Quality Update for Windows Embedded 8 Standard for x86-based Systems (KB5004302)2021-04 Security Only Quality Update for Windows Embedded Standard 7 for x64-based Systems (KB5001392)2021-07 Security Only Quality Update for Windows Embedded Standard 7 for x64-based Systems (KB5004307)2021-04 Cumulative Update for Windows Server, version 20H2 for x64-based Systems (KB5001330)2021-07 Cumulative Update for Microsoft Windows Server 2012 R2 (KB5004285)2020-11 Security Only Quality Update for Windows 8.1 for x64-based Systems (KB4586823)2021-07 Cumulative Update for Windows Server, version 20H2 for x64-based Systems (KB5004237)2020-11 Cumulative Update for Windows Server, version 20H2 for x64-based Systems (KB4586781)2021-07 Cumulative Update for Microsoft Windows Server 2012 (KB5004302)2020-11 Cumulative Update for Windows Server, version 2004 for x64-based Systems (KB4586781)2020-12 Security Only Quality Update for Windows 7 for x86-based Systems (KB4592503)2021-04 Security Only Quality Update for Windows Server 2008 R2 for x64-based Systems (KB5001392)2021-07 Security Only Quality Update for Windows 8.1 for x64-based Systems (KB5004285)2021-07 Security Only Quality Update for Windows 7 for x64-based Systems (KB5004307)2020-11 Security Only Quality Update for Windows Embedded 8 Standard for x64-based Systems (KB4586808)2021-07 Security Only Quality Update for Windows Embedded Standard 7 for x86-based Systems (KB5004307)2021-07 Security Only Quality Update for Windows 8.1 for x86-based Systems (KB5004285)2021-07 Security Only Quality Update for Windows Server 2008 R2 for x64-based Systems (KB5004307)2021-04 Security Only Quality Update for Windows Embedded Standard 7 for x86-based Systems (KB5001392)2020-12 Security Only Quality Update for Windows Server 2008 for x86-based Systems (KB4592504)2020-11 Security Only Quality Update for Windows Embedded 8 Standard for x86-based Systems (KB4586808)2021-04 Cumulative Update for Windows Server, version 1909 for x64-based Systems (KB5001337)2020-12 Security Only Quality Update for Windows Server 2008 R2 for x64-based Systems (KB4592503)2021-07 Security Only Quality Update for Windows 7 for x86-based Systems (KB5004307)2021-07 Security Only Quality Update for Windows Embedded 8 Standard for x64-based Systems (KB5004302)2021-07 Security Only Quality Update for Windows Server 2008 for x86-based Systems (KB5004299)2021-04 Security Only Quality Update for Windows 8.1 for x64-based Systems (KB5001393)2021-04 Security Only Quality Update for Windows Embedded 8 Standard for x86-based Systems (KB5001383)2020-12 Security Only Quality Update for Windows Embedded Standard 7 for x64-based Systems (KB4592503)2021-07 Cumulative Update for Microsoft Windows Server 2016, version 1607 (KB5004238)2021-04 Security Only Quality Update for Windows Server 2008 for x64-based Systems (KB5001332)2020-12 Security Only Quality Update for Windows Embedded Standard 7 for x86-based Systems (KB4592503)2020-12 Security Only Quality Update for Windows Server 2008 for x64-based Systems (KB4592504)2020-11 Cumulative Update for Windows Server, version 1909 for x64-based Systems (KB4586786)2021-07 Security Only Quality Update for Windows Server 2008 for x64-based Systems (KB5004299)2020-11 Cumulative Update for Windows Server, version 1903 for x64-based Systems (KB4586786)2021-04 Security Only Quality Update for Windows Server 2008 for x86-based Systems (KB5001332)2020-11 Security Only Quality Update for Windows 8.1 for x86-based Systems (KB4586823)2020-12 Security Only Quality Update for Windows 7 for x64-based Systems (KB4592503)2021-07 Cumulative Update for Microsoft Windows Server 2019, version 1809 (KB5004244) | Nov 10, 2020 | Nov 10, 2020 |
| Oracle Solaris | — | Upgrade library/samba/libsmbclient to version 4.13.8-11.4.42.0.1.113.0 on Solaris 11.4Upgrade service/network/samba to version 4.13.14-11.4.42.0.1.113.0 on Solaris 11.4 | Feb 17, 2022 | Nov 11, 2020 |
| Oracle_linux | — | Upgrade python3-custodiaUpgrade krb5-libsUpgrade opendnssecUpgrade krb5-develUpgrade python3-qrcodeUpgrade ipa-client-sambaUpgrade bind-dyndb-ldapUpgrade ipa-python-compatUpgrade python3-qrcode-coreUpgrade python3-ipaclientUpgrade ipa-server-dnsUpgrade libkadm5Upgrade python3-ipaserverUpgrade krb5-server-ldapUpgrade ipa-client-epnUpgrade krb5-pkinitUpgrade ipa-healthcheck-coreUpgrade python3-jwcryptoUpgrade softhsmUpgrade softhsm-develUpgrade slapi-nisUpgrade python3-ipatestsUpgrade python3-kdcproxyUpgrade python3-pyusbUpgrade ipa-server-commonUpgrade python3-yubicoUpgrade krb5-serverUpgrade ipa-clientUpgrade ipa-commonUpgrade ipa-client-commonUpgrade ipa-serverUpgrade ipa-selinuxUpgrade python3-ipalibUpgrade ipa-healthcheckUpgrade krb5-workstationUpgrade ipa-server-trust-adUpgrade custodia | May 17, 2023 | Nov 10, 2020 |
| Redhat_linux | — | Upgrade python3-qrcode-coreUpgrade ipa-python-compatUpgrade krb5-debuginfoUpgrade opendnssec-debuginfoUpgrade ipa-client-commonUpgrade krb5-workstationUpgrade ipa-client-debuginfoUpgrade python3-yubicoUpgrade opendnssecUpgrade python3-ipaserverUpgrade softhsmUpgrade libkadm5Upgrade ipa-clientUpgrade krb5-develUpgrade slapi-nis-debuginfoNo solution existsUpgrade slapi-nisUpgrade slapi-nis-debugsourceUpgrade ipa-serverUpgrade ipa-server-debuginfoUpgrade python3-ipalibUpgrade bind-dyndb-ldap-debuginfoUpgrade krb5-libs-debuginfoUpgrade krb5-serverUpgrade ipa-commonUpgrade krb5-pkinitUpgrade python3-ipatestsUpgrade ipa-debuginfoUpgrade libkadm5-debuginfoUpgrade softhsm-develUpgrade ipa-server-trust-adUpgrade python3-jwcryptoUpgrade python3-custodiaUpgrade krb5-server-debuginfoUpgrade krb5-pkinit-debuginfoUpgrade ipa-client-sambaUpgrade krb5-server-ldap-debuginfoUpgrade krb5-devel-debuginfoUpgrade krb5-libsUpgrade python3-pyusbUpgrade python3-kdcproxyUpgrade krb5-server-ldapUpgrade opendnssec-debugsourceUpgrade bind-dyndb-ldap-debugsourceUpgrade ipa-debugsourceUpgrade ipa-selinuxUpgrade ipa-client-epnUpgrade ipa-healthcheckUpgrade softhsm-debuginfoUpgrade softhsm-debugsourceUpgrade krb5-workstation-debuginfoUpgrade bind-dyndb-ldapUpgrade python3-qrcodeUpgrade ipa-server-dnsUpgrade python3-ipaclientUpgrade ipa-server-trust-ad-debuginfoUpgrade custodiaUpgrade ipa-healthcheck-coreUpgrade krb5-debugsourceUpgrade ipa-server-common | May 15, 2023 | Nov 11, 2020 |
| Rocky_linux | — | Upgrade slapi-nis-debuginfoUpgrade slapi-nis-debugsourceUpgrade slapi-nisUpgrade opendnssec-debuginfoUpgrade softhsm-debuginfoUpgrade softhsm-develUpgrade softhsmUpgrade opendnssec-debugsourceUpgrade softhsm-debugsourceUpgrade opendnssec | Aug 15, 2024 | Nov 11, 2020 |
| Suse | — | Upgrade libsamba-policy-python3-develUpgrade samba-gpupdateUpgrade libsamba-errors0Upgrade samba-develUpgrade samba-client-libs-32bitUpgrade libsamba-policy-develUpgrade samba-clientUpgrade samba-client-32bitUpgrade samba-winbind-libs-32bitUpgrade libsamba-errors-develUpgrade samba-libsUpgrade libsamba-policy0-python3Upgrade samba-winbind-libsUpgrade samba-client-libsUpgrade samba-ad-dc-libsUpgrade sambaUpgrade samba-libs-32bitUpgrade samba-winbindUpgrade samba-libs-python3Upgrade samba-ldb-ldapUpgrade samba-python3Upgrade samba-dsdb-modulesUpgrade samba-ceph | Aug 9, 2024 | Nov 11, 2020 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub