A security feature bypass vulnerability exists in the way Key Distribution Center (KDC) determines if a service ticket can be used for delegation via Kerberos Constrained Delegation (KCD). To exploit the vulnerability, a compromised service that is configured to use KCD could tamper with a service ticket that is not valid for delegation to force the KDC to accept it. The update addresses this vulnerability by changing how the KDC validates service tickets used with KCD.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python3-ipaclientUpgrade ipa-clientUpgrade libkadm5Upgrade softhsm-develUpgrade ipa-server-dnsUpgrade ipa-server-trust-adUpgrade ipa-selinuxUpgrade krb5-pkinitUpgrade python3-ipatestsUpgrade python3-qrcodeUpgrade ipa-healthcheck-coreUpgrade krb5-develUpgrade python3-kdcproxyUpgrade ipa-healthcheckUpgrade slapi-nisUpgrade krb5-libsUpgrade ipa-client-epnUpgrade opendnssecUpgrade ipa-server-commonUpgrade python3-pyusbUpgrade bind-dyndb-ldapUpgrade krb5-serverUpgrade ipa-python-compatUpgrade python3-jwcryptoUpgrade ipa-client-commonUpgrade python3-yubicoUpgrade ipa-commonUpgrade krb5-workstationUpgrade ipa-serverUpgrade python3-ipalibUpgrade python3-custodiaUpgrade custodiaUpgrade krb5-server-ldapUpgrade softhsmUpgrade python3-qrcode-coreUpgrade ipa-client-sambaUpgrade python3-ipaserver | May 15, 2023 | Nov 11, 2020 |
| Amazon_linux | — | Upgrade samba | Dec 10, 2022 | Nov 11, 2020 |
| Amazon_linux_2023 | — | Upgrade samba-pidlUpgrade samba-common-libsUpgrade samba-common-libs-debuginfoUpgrade libsmbclient-debuginfoUpgrade samba-test-libs-debuginfoUpgrade samba-client-libs-debuginfoUpgrade samba-winbind-modulesUpgrade samba-vfs-iouring-debuginfoUpgrade samba-winbindUpgrade samba-develUpgrade libnetapi-debuginfoUpgrade samba-commonUpgrade samba-winbind-modules-debuginfoUpgrade samba-debuginfoUpgrade samba-libs-debuginfoUpgrade libnetapi-develUpgrade samba-dc-libs-debuginfoUpgrade python3-samba-testUpgrade libwbclient-debuginfoUpgrade samba-test-libsUpgrade samba-debugsourceUpgrade sambaUpgrade samba-winbind-clientsUpgrade samba-dc-libsUpgrade samba-testUpgrade samba-vfs-iouringUpgrade samba-common-tools-debuginfoUpgrade samba-common-toolsUpgrade samba-winbind-debuginfoUpgrade samba-winbind-clients-debuginfoUpgrade samba-dcerpc-debuginfoUpgrade python3-samba-debuginfoUpgrade libwbclient-develUpgrade samba-krb5-printing-debuginfoUpgrade libwbclientUpgrade samba-winbind-krb5-locatorUpgrade libsmbclientUpgrade samba-client-libsUpgrade samba-clientUpgrade python3-samba-develUpgrade samba-ldb-ldap-modules-debuginfoUpgrade libnetapiUpgrade samba-krb5-printingUpgrade samba-dcerpcUpgrade samba-client-debuginfoUpgrade samba-usersharesUpgrade samba-winbind-krb5-locator-debuginfoUpgrade samba-ldb-ldap-modulesUpgrade samba-test-debuginfoUpgrade samba-libsUpgrade libsmbclient-develUpgrade python3-samba | Feb 17, 2025 | Nov 10, 2020 |
| Centos_linux | — | Upgrade python3-ipatestsUpgrade bind-dyndb-ldapUpgrade bind-dyndb-ldap-debugsourceUpgrade softhsm-debuginfoUpgrade slapi-nis-debuginfoUpgrade krb5-server-ldapUpgrade krb5-debuginfoUpgrade ipa-server-commonUpgrade ipa-server-trust-adUpgrade ipa-client-sambaUpgrade ipa-healthcheck-coreUpgrade ipa-server-trust-ad-debuginfoUpgrade custodiaUpgrade python3-qrcodeUpgrade krb5-workstation-debuginfoUpgrade krb5-debugsourceUpgrade python3-ipaclientUpgrade python3-ipalibUpgrade ipa-healthcheckUpgrade ipa-selinuxUpgrade krb5-pkinit-debuginfoUpgrade python3-ipaserverUpgrade ipa-debugsourceUpgrade krb5-server-ldap-debuginfoUpgrade ipa-serverUpgrade ipa-server-dnsUpgrade opendnssec-debugsourceUpgrade softhsm-debugsourceUpgrade krb5-libsUpgrade ipa-clientUpgrade ipa-python-compatUpgrade slapi-nis-debugsourceUpgrade opendnssec-debuginfoUpgrade opendnssecUpgrade bind-dyndb-ldap-debuginfoUpgrade krb5-develUpgrade slapi-nisUpgrade softhsm-develUpgrade krb5-workstationUpgrade ipa-client-commonUpgrade ipa-debuginfoUpgrade ipa-client-epnUpgrade python3-qrcode-coreUpgrade ipa-commonUpgrade python3-pyusbUpgrade krb5-pkinitUpgrade ipa-server-debuginfoUpgrade python3-yubicoUpgrade softhsmUpgrade krb5-libs-debuginfoUpgrade ipa-client-debuginfoUpgrade python3-custodiaUpgrade python3-kdcproxyUpgrade python3-jwcryptoUpgrade krb5-server-debuginfoUpgrade krb5-serverUpgrade libkadm5-debuginfoUpgrade libkadm5 | May 15, 2023 | Nov 11, 2020 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Sep 18, 2023 | Nov 11, 2020 |
| Msft | — | 2020-11 Security Only Quality Update for Windows Embedded 8 Standard for x86-based Systems (KB4586808)2020-11 Cumulative Update for Windows Server, version 1909 for x64-based Systems (KB4586786)2020-12 Security Only Quality Update for Windows Embedded Standard 7 for x86-based Systems (KB4592503)2020-12 Security Only Quality Update for Windows Server 2008 for x64-based Systems (KB4592504)2021-07 Security Only Quality Update for Windows Server 2008 for x64-based Systems (KB5004299)2021-07 Cumulative Update for Microsoft Windows Server 2019, version 1809 (KB5004244)2020-11 Cumulative Update for Windows Server, version 1903 for x64-based Systems (KB4586786)2021-04 Security Only Quality Update for Windows Embedded 8 Standard for x86-based Systems (KB5001383)2020-12 Security Only Quality Update for Windows Embedded Standard 7 for x64-based Systems (KB4592503)2020-12 Security Only Quality Update for Windows Server 2008 R2 for x64-based Systems (KB4592503)2021-04 Cumulative Update for Windows Server, version 1909 for x64-based Systems (KB5001337)2021-07 Cumulative Update for Microsoft Windows Server 2016, version 1607 (KB5004238)2021-04 Security Only Quality Update for Windows 8.1 for x64-based Systems (KB5001393)2021-07 Security Only Quality Update for Windows Server 2008 for x86-based Systems (KB5004299)2021-07 Security Only Quality Update for Windows Server 2008 R2 for x64-based Systems (KB5004307)2021-04 Security Only Quality Update for Windows Server 2008 for x86-based Systems (KB5001332)2021-07 Security Only Quality Update for Windows Embedded 8 Standard for x64-based Systems (KB5004302)2021-04 Security Only Quality Update for Windows Embedded Standard 7 for x86-based Systems (KB5001392)2020-11 Security Only Quality Update for Windows 8.1 for x86-based Systems (KB4586823)2021-07 Security Only Quality Update for Windows 7 for x86-based Systems (KB5004307)2020-12 Security Only Quality Update for Windows Server 2008 for x86-based Systems (KB4592504)2021-04 Security Only Quality Update for Windows Server 2008 for x64-based Systems (KB5001332)2020-12 Security Only Quality Update for Windows 7 for x64-based Systems (KB4592503)2021-07 Security Only Quality Update for Windows Embedded 8 Standard for x86-based Systems (KB5004302)2021-04 Cumulative Update for Windows Server, version 2004 for x64-based Systems (KB5001330)2020-11 Security Only Quality Update for Windows Embedded 8 Standard for x64-based Systems (KB4586808)2020-11 Security Only Quality Update for Windows 8.1 for x64-based Systems (KB4586823)2020-11 Cumulative Update for Windows Server, version 2004 for x64-based Systems (KB4586781)2021-04 Security Only Quality Update for Windows Embedded 8 Standard for x64-based Systems (KB5001383)2021-07 Security Only Quality Update for Windows 8.1 for x64-based Systems (KB5004285)2020-12 Security Only Quality Update for Windows 7 for x86-based Systems (KB4592503)2021-07 Cumulative Update for Microsoft Windows Server 2012 (KB5004302)2021-07 Security Only Quality Update for Windows Embedded Standard 7 for x64-based Systems (KB5004307)2021-07 Cumulative Update for Windows Server, version 2004 for x64-based Systems (KB5004237)2021-04 Security Only Quality Update for Windows Server 2008 R2 for x64-based Systems (KB5001392)2021-07 Security Only Quality Update for Windows 7 for x64-based Systems (KB5004307)2021-04 Security Only Quality Update for Windows 8.1 for x86-based Systems (KB5001393)2021-07 Cumulative Update for Windows Server, version 20H2 for x64-based Systems (KB5004237)2021-07 Security Only Quality Update for Windows 8.1 for x86-based Systems (KB5004285)2021-04 Cumulative Update for Windows Server, version 20H2 for x64-based Systems (KB5001330)2020-11 Cumulative Update for Windows Server, version 20H2 for x64-based Systems (KB4586781)2021-07 Cumulative Update for Microsoft Windows Server 2012 R2 (KB5004285)2021-04 Security Only Quality Update for Windows Embedded Standard 7 for x64-based Systems (KB5001392)2021-07 Security Only Quality Update for Windows Embedded Standard 7 for x86-based Systems (KB5004307) | Nov 10, 2020 | Nov 10, 2020 |
| Oracle Solaris | — | Upgrade library/samba/libsmbclient to version 4.13.8-11.4.42.0.1.113.0 on Solaris 11.4Upgrade service/network/samba to version 4.13.14-11.4.42.0.1.113.0 on Solaris 11.4 | Feb 17, 2022 | Nov 11, 2020 |
| Oracle_linux | — | Upgrade ipa-server-trust-adUpgrade krb5-workstationUpgrade python3-pyusbUpgrade python3-yubicoUpgrade ipa-commonUpgrade python3-ipatestsUpgrade slapi-nisUpgrade ipa-clientUpgrade python3-kdcproxyUpgrade custodiaUpgrade ipa-client-commonUpgrade ipa-healthcheckUpgrade ipa-selinuxUpgrade ipa-server-commonUpgrade python3-ipalibUpgrade krb5-serverUpgrade softhsm-develUpgrade ipa-serverUpgrade python3-jwcryptoUpgrade opendnssecUpgrade libkadm5Upgrade python3-custodiaUpgrade krb5-libsUpgrade python3-qrcodeUpgrade python3-qrcode-coreUpgrade ipa-server-dnsUpgrade ipa-client-epnUpgrade krb5-pkinitUpgrade krb5-server-ldapUpgrade softhsmUpgrade python3-ipaclientUpgrade krb5-develUpgrade ipa-python-compatUpgrade ipa-client-sambaUpgrade bind-dyndb-ldapUpgrade python3-ipaserverUpgrade ipa-healthcheck-core | May 17, 2023 | Nov 10, 2020 |
| Redhat_linux | — | Upgrade bind-dyndb-ldap-debuginfoUpgrade libkadm5Upgrade slapi-nis-debuginfoUpgrade ipa-server-trust-adUpgrade softhsm-develUpgrade ipa-python-compatUpgrade ipa-client-debuginfoUpgrade opendnssec-debuginfoUpgrade ipa-serverUpgrade python3-ipalibUpgrade krb5-server-debuginfoUpgrade ipa-client-commonUpgrade python3-yubicoUpgrade krb5-develUpgrade krb5-workstationUpgrade libkadm5-debuginfoUpgrade krb5-debuginfoUpgrade ipa-commonUpgrade krb5-libs-debuginfoUpgrade python3-qrcode-coreUpgrade ipa-debuginfoUpgrade python3-jwcryptoUpgrade krb5-pkinitUpgrade krb5-serverUpgrade opendnssecUpgrade softhsmUpgrade python3-custodiaUpgrade ipa-clientUpgrade ipa-server-debuginfoUpgrade python3-ipaserverUpgrade python3-ipatestsUpgrade slapi-nis-debugsourceUpgrade slapi-nisNo solution existsUpgrade softhsm-debugsourceUpgrade python3-kdcproxyUpgrade krb5-pkinit-debuginfoUpgrade bind-dyndb-ldap-debugsourceUpgrade krb5-server-ldapUpgrade python3-pyusbUpgrade ipa-selinuxUpgrade ipa-healthcheckUpgrade custodiaUpgrade python3-ipaclientUpgrade ipa-client-sambaUpgrade bind-dyndb-ldapUpgrade python3-qrcodeUpgrade ipa-healthcheck-coreUpgrade softhsm-debuginfoUpgrade krb5-debugsourceUpgrade opendnssec-debugsourceUpgrade krb5-devel-debuginfoUpgrade krb5-server-ldap-debuginfoUpgrade ipa-server-dnsUpgrade ipa-server-trust-ad-debuginfoUpgrade ipa-server-commonUpgrade ipa-client-epnUpgrade ipa-debugsourceUpgrade krb5-workstation-debuginfoUpgrade krb5-libs | May 15, 2023 | Nov 11, 2020 |
| Rocky_linux | — | Upgrade softhsm-debugsourceUpgrade opendnssecUpgrade softhsm-develUpgrade opendnssec-debugsourceUpgrade softhsmUpgrade opendnssec-debuginfoUpgrade slapi-nis-debugsourceUpgrade slapi-nisUpgrade softhsm-debuginfoUpgrade slapi-nis-debuginfo | Aug 15, 2024 | Nov 11, 2020 |
| Suse | — | Upgrade libsamba-errors0Upgrade libsamba-policy-develUpgrade samba-clientUpgrade samba-client-32bitUpgrade samba-develUpgrade samba-gpupdateUpgrade libsamba-errors-develUpgrade samba-client-libs-32bitUpgrade libsamba-policy-python3-develUpgrade samba-winbind-libs-32bitUpgrade samba-winbind-libsUpgrade samba-libs-32bitUpgrade samba-libs-python3Upgrade samba-python3Upgrade samba-libsUpgrade samba-dsdb-modulesUpgrade sambaUpgrade samba-ldb-ldapUpgrade samba-winbindUpgrade samba-ad-dc-libsUpgrade libsamba-policy0-python3Upgrade samba-client-libsUpgrade samba-ceph | Aug 9, 2024 | Nov 11, 2020 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub