This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page. View CVE-2015-3206 →

DEBIAN-CVE-2015-3206

The checkPassword function in python-kerberos does not authenticate the KDC it attempts to communicate with, which allows remote attackers to cause a...

Original description

The description as published by the source.

The checkPassword function in python-kerberos does not authenticate the KDC it attempts to communicate with, which allows remote attackers to cause a denial of service (bad response), or have other unspecified impact by performing a man-in-the-middle attack.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Affected packages

Debian:12 pykerberos

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.5-1"}]}]

Debian:13 pykerberos

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.5-1"}]}]

Debian:14 pykerberos

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.5-1"}]}]

References

advisory security-tracker.debian.org