ubuntu · CVE-2017-7562

Quick triage

Priority: medium Published: 2018-07-26 15:29:00 UTC Updated: 2025-08-25 22:38:03 UTC

View at Official ubuntu advisory, NVD, CVE.org · CVE detail

Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.

Tracker summary

CVE-2017-7562 medium priority: Ubuntu including 1 source packages (krb5), 4 status rows across 4 suites (trusty, upstream, xenial, zesty): not-affected 3, needs-triage 1.

Description:

An authentication bypass flaw was found in the way krb5's certauth interface before 1.16.1 handled the validation of client certificates. A remote attacker able to communicate with the KDC could potentially use this flaw to impersonate arbitrary principals under rare and erroneous circumstances.

cvelogic Threat Intelligence