CVE-2007-3999 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2007-3999 Interim 1 35 2025-11-05T06:19:48Z current 2021-05-30T12:39:43Z 2025-11-05T06:19:48Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2007-3999 Stack-based buffer overflow in the svcauth_gss_validate function in lib/rpc/svc_auth_gss.c in the RPCSEC_GSS RPC library (librpcsecgss) in MIT Kerberos 5 (krb5) 1.4 through 1.6.2, as used by the Kerberos administration daemon (kadmind) and some third-party applications that use krb5, allows remote attackers to cause a denial of service (daemon crash) and probably execute arbitrary code via a long string in an RPC message. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/UBLPLGSRDQQXOBBXTFGPXQZUFQYCTZ7C/#UBLPLGSRDQQXOBBXTFGPXQZUFQYCTZ7C E-Mail link for SUSE-SR:2007:019 https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/F7ZMAXEV3J7BMNLMBA24YLSVBK676YXV/#F7ZMAXEV3J7BMNLMBA24YLSVBK676YXV E-Mail link for SUSE-SR:2007:024 https://www.suse.com/support/security/rating/ SUSE Security Ratings HPE Helion OpenStack 8 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Desktop 12 SUSE Linux Enterprise Software Development Kit 12 SUSE Linux Enterprise Desktop 12 SP1 SUSE Linux Enterprise Software Development Kit 12 SP1 SUSE Linux Enterprise High Performance Computing 12 SP5 SUSE Linux Enterprise Server 11 SP1 SUSE Linux Enterprise Server 11 SP2 SUSE Linux Enterprise Server 11 SP3 SUSE Linux Enterprise Server 11 SP4 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Server 12 SUSE Linux Enterprise Software Development Kit 12 SUSE Linux Enterprise Server 12 SP1 SUSE Linux Enterprise Software Development Kit 12 SP1 SUSE Linux Enterprise Server 12 SP2-BCL SUSE Linux Enterprise Server 12 SP3-BCL SUSE Linux Enterprise Server 12 SP3-ESPOS SUSE Linux Enterprise Server 12 SP3-LTSS SUSE Linux Enterprise Server 12 SP4-ESPOS SUSE Linux Enterprise Server 12 SP4-LTSS SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Server 16.0 SUSE Linux Enterprise Server Teradata 12 SP3 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Software Development Kit 12 SUSE Linux Enterprise Software Development Kit 12 SP1 SUSE Linux Enterprise Server for SAP Applications 12 SP3 SUSE Linux Enterprise Server for SAP Applications 12 SP4 SUSE Linux Enterprise Server for SAP Applications 12 SP5 SUSE Linux Micro 6.0 SUSE Linux Micro 6.1 SUSE OpenStack Cloud 8 SUSE OpenStack Cloud 9 SUSE OpenStack Cloud Crowbar 8 SUSE OpenStack Cloud Crowbar 9 openSUSE Tumbleweed krb5-1.19.2-2.2 krb5-1.20.1-4.11 krb5-1.21.3-160000.2.2 krb5-1.21.3-slfo.1.1_1.2 krb5-1.6.3-133.27.1 krb5-1.6.3-133.48.48.1 krb5-1.6.3-133.49.54.1 krb5-1.6.3-133.49.66.1 krb5-32bit-1.19.2-2.2 krb5-32bit-1.6.3-133.27.1 krb5-32bit-1.6.3-133.48.48.1 krb5-32bit-1.6.3-133.49.54.1 krb5-32bit-1.6.3-133.49.66.1 krb5-apps-clients-1.6.3-133.27.1 krb5-apps-clients-1.6.3-133.48.48.1 krb5-apps-clients-1.6.3-133.49.54.1 krb5-apps-clients-1.6.3-133.49.66.1 krb5-apps-servers-1.6.3-133.27.1 krb5-apps-servers-1.6.3-133.48.48.1 krb5-apps-servers-1.6.3-133.49.54.1 krb5-apps-servers-1.6.3-133.49.66.1 krb5-client-1.19.2-2.2 krb5-client-1.21.3-160000.2.2 krb5-client-1.6.3-133.27.1 krb5-client-1.6.3-133.48.48.1 krb5-client-1.6.3-133.49.54.1 krb5-client-1.6.3-133.49.66.1 krb5-devel-1.19.2-2.2 krb5-devel-1.21.3-160000.2.2 krb5-devel-1.6.3-133.49.66.1 krb5-devel-32bit-1.19.2-2.2 krb5-devel-32bit-1.6.3-133.49.66.1 krb5-doc-1.6.3-133.21 krb5-doc-1.6.3-133.49.54.1 krb5-doc-1.6.3-133.49.66.1 krb5-plugin-kdb-ldap-1.19.2-2.2 krb5-plugin-kdb-ldap-1.21.3-160000.2.2 krb5-plugin-kdb-ldap-1.6.3-133.12 krb5-plugin-kdb-ldap-1.6.3-133.49.54.1 krb5-plugin-kdb-ldap-1.6.3-133.49.66.1 krb5-plugin-preauth-otp-1.19.2-2.2 krb5-plugin-preauth-otp-1.21.3-160000.2.2 krb5-plugin-preauth-pkinit-1.19.2-2.2 krb5-plugin-preauth-pkinit-1.21.3-160000.2.2 krb5-plugin-preauth-pkinit-1.6.3-133.12 krb5-plugin-preauth-pkinit-1.6.3-133.49.54.1 krb5-plugin-preauth-pkinit-1.6.3-133.49.66.1 krb5-plugin-preauth-spake-1.19.2-2.2 krb5-plugin-preauth-spake-1.21.3-160000.2.2 krb5-server-1.19.2-2.2 krb5-server-1.21.3-160000.2.2 krb5-server-1.6.3-133.27.1 krb5-server-1.6.3-133.48.48.1 krb5-server-1.6.3-133.49.54.1 krb5-server-1.6.3-133.49.66.1 krb5-x86-1.6.3-133.27.1 krb5-x86-1.6.3-133.48.48.1 krb5-x86-1.6.3-133.49.54.1 krb5-x86-1.6.3-133.49.66.1 librpcsecgss-0.18-1.15 librpcsecgss-devel-0.19-16.56 librpcsecgss3-0.19-16.56 libtirpc libtirpc-devel-0.2.1-1.7.1 libtirpc-devel-1.3.2-2.1 libtirpc-devel-1.3.6-160000.2.2 libtirpc-netconfig libtirpc-netconfig-1.3.2-2.1 libtirpc-netconfig-1.3.4-1.6 libtirpc-netconfig-1.3.4-slfo.1.1_1.2 libtirpc-netconfig-1.3.6-160000.2.2 libtirpc1 libtirpc1-0.2.1-1.2.16 libtirpc1-0.2.1-1.5.1 libtirpc1-0.2.1-1.7.1 libtirpc1-32bit libtirpc3 libtirpc3-1.3.2-2.1 libtirpc3-1.3.4-1.6 libtirpc3-1.3.4-slfo.1.1_1.2 libtirpc3-1.3.6-160000.2.2 libtirpc3-32bit libtirpc3-32bit-1.3.2-2.1 librpcsecgss3-0.19-16.56 as a component of SUSE Linux Enterprise Desktop 12 librpcsecgss3-0.19-16.56 as a component of SUSE Linux Enterprise Desktop 12 SP1 krb5-1.6.3-133.27.1 as a component of SUSE Linux Enterprise Server 11 SP1 krb5-32bit-1.6.3-133.27.1 as a component of SUSE Linux Enterprise Server 11 SP1 krb5-apps-clients-1.6.3-133.27.1 as a component of SUSE Linux Enterprise Server 11 SP1 krb5-apps-servers-1.6.3-133.27.1 as a component of SUSE Linux Enterprise Server 11 SP1 krb5-client-1.6.3-133.27.1 as a component of SUSE Linux Enterprise Server 11 SP1 krb5-doc-1.6.3-133.21 as a component of SUSE Linux Enterprise Server 11 SP1 krb5-plugin-kdb-ldap-1.6.3-133.12 as a component of SUSE Linux Enterprise Server 11 SP1 krb5-plugin-preauth-pkinit-1.6.3-133.12 as a component of SUSE Linux Enterprise Server 11 SP1 krb5-server-1.6.3-133.27.1 as a component of SUSE Linux Enterprise Server 11 SP1 krb5-x86-1.6.3-133.27.1 as a component of SUSE Linux Enterprise Server 11 SP1 librpcsecgss-0.18-1.15 as a component of SUSE Linux Enterprise Server 11 SP1 libtirpc1-0.2.1-1.2.16 as a component of SUSE Linux Enterprise Server 11 SP1 krb5-1.6.3-133.48.48.1 as a component of SUSE Linux Enterprise Server 11 SP2 krb5-32bit-1.6.3-133.48.48.1 as a component of SUSE Linux Enterprise Server 11 SP2 krb5-apps-clients-1.6.3-133.48.48.1 as a component of SUSE Linux Enterprise Server 11 SP2 krb5-apps-servers-1.6.3-133.48.48.1 as a component of SUSE Linux Enterprise Server 11 SP2 krb5-client-1.6.3-133.48.48.1 as a component of SUSE Linux Enterprise Server 11 SP2 krb5-doc-1.6.3-133.21 as a component of SUSE Linux Enterprise Server 11 SP2 krb5-plugin-kdb-ldap-1.6.3-133.12 as a component of SUSE Linux Enterprise Server 11 SP2 krb5-plugin-preauth-pkinit-1.6.3-133.12 as a component of SUSE Linux Enterprise Server 11 SP2 krb5-server-1.6.3-133.48.48.1 as a component of SUSE Linux Enterprise Server 11 SP2 krb5-x86-1.6.3-133.48.48.1 as a component of SUSE Linux Enterprise Server 11 SP2 librpcsecgss-0.18-1.15 as a component of SUSE Linux Enterprise Server 11 SP2 libtirpc1-0.2.1-1.5.1 as a component of SUSE Linux Enterprise Server 11 SP2 krb5-1.6.3-133.49.54.1 as a component of SUSE Linux Enterprise Server 11 SP3 krb5-32bit-1.6.3-133.49.54.1 as a component of SUSE Linux Enterprise Server 11 SP3 krb5-apps-clients-1.6.3-133.49.54.1 as a component of SUSE Linux Enterprise Server 11 SP3 krb5-apps-servers-1.6.3-133.49.54.1 as a component of SUSE Linux Enterprise Server 11 SP3 krb5-client-1.6.3-133.49.54.1 as a component of SUSE Linux Enterprise Server 11 SP3 krb5-doc-1.6.3-133.49.54.1 as a component of SUSE Linux Enterprise Server 11 SP3 krb5-plugin-kdb-ldap-1.6.3-133.49.54.1 as a component of SUSE Linux Enterprise Server 11 SP3 krb5-plugin-preauth-pkinit-1.6.3-133.49.54.1 as a component of SUSE Linux Enterprise Server 11 SP3 krb5-server-1.6.3-133.49.54.1 as a component of SUSE Linux Enterprise Server 11 SP3 krb5-x86-1.6.3-133.49.54.1 as a component of SUSE Linux Enterprise Server 11 SP3 librpcsecgss-0.18-1.15 as a component of SUSE Linux Enterprise Server 11 SP3 libtirpc1-0.2.1-1.5.1 as a component of SUSE Linux Enterprise Server 11 SP3 krb5-1.6.3-133.49.66.1 as a component of SUSE Linux Enterprise Server 11 SP4 krb5-32bit-1.6.3-133.49.66.1 as a component of SUSE Linux Enterprise Server 11 SP4 krb5-apps-clients-1.6.3-133.49.66.1 as a component of SUSE Linux Enterprise Server 11 SP4 krb5-apps-servers-1.6.3-133.49.66.1 as a component of SUSE Linux Enterprise Server 11 SP4 krb5-client-1.6.3-133.49.66.1 as a component of SUSE Linux Enterprise Server 11 SP4 krb5-doc-1.6.3-133.49.66.1 as a component of SUSE Linux Enterprise Server 11 SP4 krb5-plugin-kdb-ldap-1.6.3-133.49.66.1 as a component of SUSE Linux Enterprise Server 11 SP4 krb5-plugin-preauth-pkinit-1.6.3-133.49.66.1 as a component of SUSE Linux Enterprise Server 11 SP4 krb5-server-1.6.3-133.49.66.1 as a component of SUSE Linux Enterprise Server 11 SP4 krb5-x86-1.6.3-133.49.66.1 as a component of SUSE Linux Enterprise Server 11 SP4 librpcsecgss-0.18-1.15 as a component of SUSE Linux Enterprise Server 11 SP4 libtirpc1-0.2.1-1.7.1 as a component of SUSE Linux Enterprise Server 11 SP4 librpcsecgss3-0.19-16.56 as a component of SUSE Linux Enterprise Server 12 librpcsecgss3-0.19-16.56 as a component of SUSE Linux Enterprise Server 12 SP1 krb5-1.21.3-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 krb5-client-1.21.3-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 krb5-devel-1.21.3-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 krb5-plugin-kdb-ldap-1.21.3-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 krb5-plugin-preauth-otp-1.21.3-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 krb5-plugin-preauth-pkinit-1.21.3-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 krb5-plugin-preauth-spake-1.21.3-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 krb5-server-1.21.3-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 libtirpc-devel-1.3.6-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 libtirpc-netconfig-1.3.6-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 libtirpc3-1.3.6-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 krb5-devel-1.6.3-133.49.66.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 krb5-devel-32bit-1.6.3-133.49.66.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 krb5-server-1.6.3-133.49.66.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 libtirpc-devel-0.2.1-1.7.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 librpcsecgss-devel-0.19-16.56 as a component of SUSE Linux Enterprise Software Development Kit 12 librpcsecgss-devel-0.19-16.56 as a component of SUSE Linux Enterprise Software Development Kit 12 SP1 krb5-1.20.1-4.11 as a component of SUSE Linux Micro 6.0 libtirpc-netconfig-1.3.4-1.6 as a component of SUSE Linux Micro 6.0 libtirpc3-1.3.4-1.6 as a component of SUSE Linux Micro 6.0 krb5-1.21.3-slfo.1.1_1.2 as a component of SUSE Linux Micro 6.1 libtirpc-netconfig-1.3.4-slfo.1.1_1.2 as a component of SUSE Linux Micro 6.1 libtirpc3-1.3.4-slfo.1.1_1.2 as a component of SUSE Linux Micro 6.1 krb5-1.19.2-2.2 as a component of openSUSE Tumbleweed krb5-32bit-1.19.2-2.2 as a component of openSUSE Tumbleweed krb5-client-1.19.2-2.2 as a component of openSUSE Tumbleweed krb5-devel-1.19.2-2.2 as a component of openSUSE Tumbleweed krb5-devel-32bit-1.19.2-2.2 as a component of openSUSE Tumbleweed krb5-plugin-kdb-ldap-1.19.2-2.2 as a component of openSUSE Tumbleweed krb5-plugin-preauth-otp-1.19.2-2.2 as a component of openSUSE Tumbleweed krb5-plugin-preauth-pkinit-1.19.2-2.2 as a component of openSUSE Tumbleweed krb5-plugin-preauth-spake-1.19.2-2.2 as a component of openSUSE Tumbleweed krb5-server-1.19.2-2.2 as a component of openSUSE Tumbleweed libtirpc-devel-1.3.2-2.1 as a component of openSUSE Tumbleweed libtirpc-netconfig-1.3.2-2.1 as a component of openSUSE Tumbleweed libtirpc3-1.3.2-2.1 as a component of openSUSE Tumbleweed libtirpc3-32bit-1.3.2-2.1 as a component of openSUSE Tumbleweed libtirpc-netconfig as a component of HPE Helion OpenStack 8 libtirpc3 as a component of HPE Helion OpenStack 8 libtirpc3-32bit as a component of HPE Helion OpenStack 8 libtirpc as a component of HPE Helion OpenStack 8 libtirpc1 as a component of HPE Helion OpenStack 8 libtirpc1-32bit as a component of HPE Helion OpenStack 8 libtirpc as a component of SUSE Linux Enterprise High Performance Computing 12 SP5 libtirpc1 as a component of SUSE Linux Enterprise High Performance Computing 12 SP5 libtirpc-netconfig as a component of SUSE Linux Enterprise Server 12 SP2-BCL libtirpc3 as a component of SUSE Linux Enterprise Server 12 SP2-BCL libtirpc3-32bit as a component of SUSE Linux Enterprise Server 12 SP2-BCL libtirpc as a component of SUSE Linux Enterprise Server 12 SP2-BCL libtirpc1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL libtirpc1-32bit as a component of SUSE Linux Enterprise Server 12 SP2-BCL libtirpc-netconfig as a component of SUSE Linux Enterprise Server 12 SP3-BCL libtirpc3 as a component of SUSE Linux Enterprise Server 12 SP3-BCL libtirpc3-32bit as a component of SUSE Linux Enterprise Server 12 SP3-BCL libtirpc as a component of SUSE Linux Enterprise Server 12 SP3-BCL libtirpc1 as a component of SUSE Linux Enterprise Server 12 SP3-BCL libtirpc1-32bit as a component of SUSE Linux Enterprise Server 12 SP3-BCL libtirpc-netconfig as a component of SUSE Linux Enterprise Server 12 SP3-ESPOS libtirpc3 as a component of SUSE Linux Enterprise Server 12 SP3-ESPOS libtirpc3-32bit as a component of SUSE Linux Enterprise Server 12 SP3-ESPOS libtirpc as a component of SUSE Linux Enterprise Server 12 SP3-ESPOS libtirpc1 as a component of SUSE Linux Enterprise Server 12 SP3-ESPOS libtirpc1-32bit as a component of SUSE Linux Enterprise Server 12 SP3-ESPOS libtirpc-netconfig as a component of SUSE Linux Enterprise Server 12 SP3-LTSS libtirpc3 as a component of SUSE Linux Enterprise Server 12 SP3-LTSS libtirpc3-32bit as a component of SUSE Linux Enterprise Server 12 SP3-LTSS libtirpc as a component of SUSE Linux Enterprise Server 12 SP3-LTSS libtirpc1 as a component of SUSE Linux Enterprise Server 12 SP3-LTSS libtirpc1-32bit as a component of SUSE Linux Enterprise Server 12 SP3-LTSS libtirpc-netconfig as a component of SUSE Linux Enterprise Server 12 SP4-ESPOS libtirpc3 as a component of SUSE Linux Enterprise Server 12 SP4-ESPOS libtirpc3-32bit as a component of SUSE Linux Enterprise Server 12 SP4-ESPOS libtirpc as a component of SUSE Linux Enterprise Server 12 SP4-ESPOS libtirpc1 as a component of SUSE Linux Enterprise Server 12 SP4-ESPOS libtirpc1-32bit as a component of SUSE Linux Enterprise Server 12 SP4-ESPOS libtirpc-netconfig as a component of SUSE Linux Enterprise Server 12 SP4-LTSS libtirpc3 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS libtirpc3-32bit as a component of SUSE Linux Enterprise Server 12 SP4-LTSS libtirpc as a component of SUSE Linux Enterprise Server 12 SP4-LTSS libtirpc1 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS libtirpc1-32bit as a component of SUSE Linux Enterprise Server 12 SP4-LTSS libtirpc-netconfig as a component of SUSE Linux Enterprise Server 12 SP5 libtirpc3 as a component of SUSE Linux Enterprise Server 12 SP5 libtirpc3-32bit as a component of SUSE Linux Enterprise Server 12 SP5 libtirpc as a component of SUSE Linux Enterprise Server 12 SP5 libtirpc1 as a component of SUSE Linux Enterprise Server 12 SP5 libtirpc1-32bit as a component of SUSE Linux Enterprise Server 12 SP5 libtirpc as a component of SUSE Linux Enterprise Server Teradata 12 SP3 libtirpc1 as a component of SUSE Linux Enterprise Server Teradata 12 SP3 libtirpc-netconfig as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 libtirpc3 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 libtirpc3-32bit as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 libtirpc as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 libtirpc1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 libtirpc1-32bit as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 libtirpc-netconfig as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 libtirpc3 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 libtirpc3-32bit as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 libtirpc as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 libtirpc1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 libtirpc1-32bit as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 libtirpc as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 libtirpc1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 libtirpc-netconfig as a component of SUSE OpenStack Cloud 8 libtirpc3 as a component of SUSE OpenStack Cloud 8 libtirpc3-32bit as a component of SUSE OpenStack Cloud 8 libtirpc as a component of SUSE OpenStack Cloud 8 libtirpc1 as a component of SUSE OpenStack Cloud 8 libtirpc1-32bit as a component of SUSE OpenStack Cloud 8 libtirpc-netconfig as a component of SUSE OpenStack Cloud 9 libtirpc3 as a component of SUSE OpenStack Cloud 9 libtirpc3-32bit as a component of SUSE OpenStack Cloud 9 libtirpc as a component of SUSE OpenStack Cloud 9 libtirpc1 as a component of SUSE OpenStack Cloud 9 libtirpc1-32bit as a component of SUSE OpenStack Cloud 9 libtirpc-netconfig as a component of SUSE OpenStack Cloud Crowbar 8 libtirpc3 as a component of SUSE OpenStack Cloud Crowbar 8 libtirpc3-32bit as a component of SUSE OpenStack Cloud Crowbar 8 libtirpc as a component of SUSE OpenStack Cloud Crowbar 8 libtirpc1 as a component of SUSE OpenStack Cloud Crowbar 8 libtirpc1-32bit as a component of SUSE OpenStack Cloud Crowbar 8 libtirpc-netconfig as a component of SUSE OpenStack Cloud Crowbar 9 libtirpc3 as a component of SUSE OpenStack Cloud Crowbar 9 libtirpc3-32bit as a component of SUSE OpenStack Cloud Crowbar 9 libtirpc as a component of SUSE OpenStack Cloud Crowbar 9 libtirpc1 as a component of SUSE OpenStack Cloud Crowbar 9 libtirpc1-32bit as a component of SUSE OpenStack Cloud Crowbar 9 Stack-based buffer overflow in the svcauth_gss_validate function in lib/rpc/svc_auth_gss.c in the RPCSEC_GSS RPC library (librpcsecgss) in MIT Kerberos 5 (krb5) 1.4 through 1.6.2, as used by the Kerberos administration daemon (kadmind) and some third-party applications that use krb5, allows remote attackers to cause a denial of service (daemon crash) and probably execute arbitrary code via a long string in an RPC message. CVE-2007-3999 SUSE Linux Enterprise Desktop 12:librpcsecgss3-0.19-16.56 SUSE Linux Enterprise Desktop 12 SP1:librpcsecgss3-0.19-16.56 SUSE Linux Enterprise Server 11 SP1:krb5-1.6.3-133.27.1 SUSE Linux Enterprise Server 11 SP1:krb5-32bit-1.6.3-133.27.1 SUSE Linux Enterprise Server 11 SP1:krb5-apps-clients-1.6.3-133.27.1 SUSE Linux Enterprise Server 11 SP1:krb5-apps-servers-1.6.3-133.27.1 SUSE Linux Enterprise Server 11 SP1:krb5-client-1.6.3-133.27.1 SUSE Linux Enterprise Server 11 SP1:krb5-doc-1.6.3-133.21 SUSE Linux Enterprise Server 11 SP1:krb5-plugin-kdb-ldap-1.6.3-133.12 SUSE Linux Enterprise Server 11 SP1:krb5-plugin-preauth-pkinit-1.6.3-133.12 SUSE Linux Enterprise Server 11 SP1:krb5-server-1.6.3-133.27.1 SUSE Linux Enterprise Server 11 SP1:krb5-x86-1.6.3-133.27.1 SUSE Linux Enterprise Server 11 SP1:librpcsecgss-0.18-1.15 SUSE Linux Enterprise Server 11 SP1:libtirpc1-0.2.1-1.2.16 SUSE Linux Enterprise Server 11 SP2:krb5-1.6.3-133.48.48.1 SUSE Linux Enterprise Server 11 SP2:krb5-32bit-1.6.3-133.48.48.1 SUSE Linux Enterprise Server 11 SP2:krb5-apps-clients-1.6.3-133.48.48.1 SUSE Linux Enterprise Server 11 SP2:krb5-apps-servers-1.6.3-133.48.48.1 SUSE Linux Enterprise Server 11 SP2:krb5-client-1.6.3-133.48.48.1 SUSE Linux Enterprise Server 11 SP2:krb5-doc-1.6.3-133.21 SUSE Linux Enterprise Server 11 SP2:krb5-plugin-kdb-ldap-1.6.3-133.12 SUSE Linux Enterprise Server 11 SP2:krb5-plugin-preauth-pkinit-1.6.3-133.12 SUSE Linux Enterprise Server 11 SP2:krb5-server-1.6.3-133.48.48.1 SUSE Linux Enterprise Server 11 SP2:krb5-x86-1.6.3-133.48.48.1 SUSE Linux Enterprise Server 11 SP2:librpcsecgss-0.18-1.15 SUSE Linux Enterprise Server 11 SP2:libtirpc1-0.2.1-1.5.1 SUSE Linux Enterprise Server 11 SP3:krb5-1.6.3-133.49.54.1 SUSE Linux Enterprise Server 11 SP3:krb5-32bit-1.6.3-133.49.54.1 SUSE Linux Enterprise Server 11 SP3:krb5-apps-clients-1.6.3-133.49.54.1 SUSE Linux Enterprise Server 11 SP3:krb5-apps-servers-1.6.3-133.49.54.1 SUSE Linux Enterprise Server 11 SP3:krb5-client-1.6.3-133.49.54.1 SUSE Linux Enterprise Server 11 SP3:krb5-doc-1.6.3-133.49.54.1 SUSE Linux Enterprise Server 11 SP3:krb5-plugin-kdb-ldap-1.6.3-133.49.54.1 SUSE Linux Enterprise Server 11 SP3:krb5-plugin-preauth-pkinit-1.6.3-133.49.54.1 SUSE Linux Enterprise Server 11 SP3:krb5-server-1.6.3-133.49.54.1 SUSE Linux Enterprise Server 11 SP3:krb5-x86-1.6.3-133.49.54.1 SUSE Linux Enterprise Server 11 SP3:librpcsecgss-0.18-1.15 SUSE Linux Enterprise Server 11 SP3:libtirpc1-0.2.1-1.5.1 SUSE Linux Enterprise Server 11 SP4:krb5-1.6.3-133.49.66.1 SUSE Linux Enterprise Server 11 SP4:krb5-32bit-1.6.3-133.49.66.1 SUSE Linux Enterprise Server 11 SP4:krb5-apps-clients-1.6.3-133.49.66.1 SUSE Linux Enterprise Server 11 SP4:krb5-apps-servers-1.6.3-133.49.66.1 SUSE Linux Enterprise Server 11 SP4:krb5-client-1.6.3-133.49.66.1 SUSE Linux Enterprise Server 11 SP4:krb5-doc-1.6.3-133.49.66.1 SUSE Linux Enterprise Server 11 SP4:krb5-plugin-kdb-ldap-1.6.3-133.49.66.1 SUSE Linux Enterprise Server 11 SP4:krb5-plugin-preauth-pkinit-1.6.3-133.49.66.1 SUSE Linux Enterprise Server 11 SP4:krb5-server-1.6.3-133.49.66.1 SUSE Linux Enterprise Server 11 SP4:krb5-x86-1.6.3-133.49.66.1 SUSE Linux Enterprise Server 11 SP4:librpcsecgss-0.18-1.15 SUSE Linux Enterprise Server 11 SP4:libtirpc1-0.2.1-1.7.1 SUSE Linux Enterprise Server 12:librpcsecgss3-0.19-16.56 SUSE Linux Enterprise Server 12 SP1:librpcsecgss3-0.19-16.56 SUSE Linux Enterprise Server 16.0:krb5-1.21.3-160000.2.2 SUSE Linux Enterprise Server 16.0:krb5-client-1.21.3-160000.2.2 SUSE Linux Enterprise Server 16.0:krb5-devel-1.21.3-160000.2.2 SUSE Linux Enterprise Server 16.0:krb5-plugin-kdb-ldap-1.21.3-160000.2.2 SUSE Linux Enterprise Server 16.0:krb5-plugin-preauth-otp-1.21.3-160000.2.2 SUSE Linux Enterprise Server 16.0:krb5-plugin-preauth-pkinit-1.21.3-160000.2.2 SUSE Linux Enterprise Server 16.0:krb5-plugin-preauth-spake-1.21.3-160000.2.2 SUSE Linux Enterprise Server 16.0:krb5-server-1.21.3-160000.2.2 SUSE Linux Enterprise Server 16.0:libtirpc-devel-1.3.6-160000.2.2 SUSE Linux Enterprise Server 16.0:libtirpc-netconfig-1.3.6-160000.2.2 SUSE Linux Enterprise Server 16.0:libtirpc3-1.3.6-160000.2.2 SUSE Linux Enterprise Software Development Kit 11 SP4:krb5-devel-1.6.3-133.49.66.1 SUSE Linux Enterprise Software Development Kit 11 SP4:krb5-devel-32bit-1.6.3-133.49.66.1 SUSE Linux Enterprise Software Development Kit 11 SP4:krb5-server-1.6.3-133.49.66.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libtirpc-devel-0.2.1-1.7.1 SUSE Linux Enterprise Software Development Kit 12:librpcsecgss-devel-0.19-16.56 SUSE Linux Enterprise Software Development Kit 12 SP1:librpcsecgss-devel-0.19-16.56 SUSE Linux Micro 6.0:krb5-1.20.1-4.11 SUSE Linux Micro 6.0:libtirpc-netconfig-1.3.4-1.6 SUSE Linux Micro 6.0:libtirpc3-1.3.4-1.6 SUSE Linux Micro 6.1:krb5-1.21.3-slfo.1.1_1.2 SUSE Linux Micro 6.1:libtirpc-netconfig-1.3.4-slfo.1.1_1.2 SUSE Linux Micro 6.1:libtirpc3-1.3.4-slfo.1.1_1.2 openSUSE Tumbleweed:krb5-1.19.2-2.2 openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2 openSUSE Tumbleweed:krb5-client-1.19.2-2.2 openSUSE Tumbleweed:krb5-devel-1.19.2-2.2 openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2 openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2 openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2 openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2 openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2 openSUSE Tumbleweed:krb5-server-1.19.2-2.2 openSUSE Tumbleweed:libtirpc-devel-1.3.2-2.1 openSUSE Tumbleweed:libtirpc-netconfig-1.3.2-2.1 openSUSE Tumbleweed:libtirpc3-1.3.2-2.1 openSUSE Tumbleweed:libtirpc3-32bit-1.3.2-2.1 HPE Helion OpenStack 8:libtirpc HPE Helion OpenStack 8:libtirpc-netconfig HPE Helion OpenStack 8:libtirpc1 HPE Helion OpenStack 8:libtirpc1-32bit HPE Helion OpenStack 8:libtirpc3 HPE Helion OpenStack 8:libtirpc3-32bit SUSE Linux Enterprise High Performance Computing 12 SP5:libtirpc SUSE Linux Enterprise High Performance Computing 12 SP5:libtirpc1 SUSE Linux Enterprise Server 12 SP2-BCL:libtirpc SUSE Linux Enterprise Server 12 SP2-BCL:libtirpc-netconfig SUSE Linux Enterprise Server 12 SP2-BCL:libtirpc1 SUSE Linux Enterprise Server 12 SP2-BCL:libtirpc1-32bit SUSE Linux Enterprise Server 12 SP2-BCL:libtirpc3 SUSE Linux Enterprise Server 12 SP2-BCL:libtirpc3-32bit SUSE Linux Enterprise Server 12 SP3-BCL:libtirpc SUSE Linux Enterprise Server 12 SP3-BCL:libtirpc-netconfig SUSE Linux Enterprise Server 12 SP3-BCL:libtirpc1 SUSE Linux Enterprise Server 12 SP3-BCL:libtirpc1-32bit SUSE Linux Enterprise Server 12 SP3-BCL:libtirpc3 SUSE Linux Enterprise Server 12 SP3-BCL:libtirpc3-32bit SUSE Linux Enterprise Server 12 SP3-ESPOS:libtirpc SUSE Linux Enterprise Server 12 SP3-ESPOS:libtirpc-netconfig SUSE Linux Enterprise Server 12 SP3-ESPOS:libtirpc1 SUSE Linux Enterprise Server 12 SP3-ESPOS:libtirpc1-32bit SUSE Linux Enterprise Server 12 SP3-ESPOS:libtirpc3 SUSE Linux Enterprise Server 12 SP3-ESPOS:libtirpc3-32bit SUSE Linux Enterprise Server 12 SP3-LTSS:libtirpc SUSE Linux Enterprise Server 12 SP3-LTSS:libtirpc-netconfig SUSE Linux Enterprise Server 12 SP3-LTSS:libtirpc1 SUSE Linux Enterprise Server 12 SP3-LTSS:libtirpc1-32bit SUSE Linux Enterprise Server 12 SP3-LTSS:libtirpc3 SUSE Linux Enterprise Server 12 SP3-LTSS:libtirpc3-32bit SUSE Linux Enterprise Server 12 SP4-ESPOS:libtirpc SUSE Linux Enterprise Server 12 SP4-ESPOS:libtirpc-netconfig SUSE Linux Enterprise Server 12 SP4-ESPOS:libtirpc1 SUSE Linux Enterprise Server 12 SP4-ESPOS:libtirpc1-32bit SUSE Linux Enterprise Server 12 SP4-ESPOS:libtirpc3 SUSE Linux Enterprise Server 12 SP4-ESPOS:libtirpc3-32bit SUSE Linux Enterprise Server 12 SP4-LTSS:libtirpc SUSE Linux Enterprise Server 12 SP4-LTSS:libtirpc-netconfig SUSE Linux Enterprise Server 12 SP4-LTSS:libtirpc1 SUSE Linux Enterprise Server 12 SP4-LTSS:libtirpc1-32bit SUSE Linux Enterprise Server 12 SP4-LTSS:libtirpc3 SUSE Linux Enterprise Server 12 SP4-LTSS:libtirpc3-32bit SUSE Linux Enterprise Server 12 SP5:libtirpc SUSE Linux Enterprise Server 12 SP5:libtirpc-netconfig SUSE Linux Enterprise Server 12 SP5:libtirpc1 SUSE Linux Enterprise Server 12 SP5:libtirpc1-32bit SUSE Linux Enterprise Server 12 SP5:libtirpc3 SUSE Linux Enterprise Server 12 SP5:libtirpc3-32bit SUSE Linux Enterprise Server Teradata 12 SP3:libtirpc SUSE Linux Enterprise Server Teradata 12 SP3:libtirpc1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtirpc SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtirpc-netconfig SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtirpc1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtirpc1-32bit SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtirpc3 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtirpc3-32bit SUSE Linux Enterprise Server for SAP Applications 12 SP4:libtirpc SUSE Linux Enterprise Server for SAP Applications 12 SP4:libtirpc-netconfig SUSE Linux Enterprise Server for SAP Applications 12 SP4:libtirpc1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libtirpc1-32bit SUSE Linux Enterprise Server for SAP Applications 12 SP4:libtirpc3 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libtirpc3-32bit SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtirpc SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtirpc1 SUSE OpenStack Cloud 8:libtirpc SUSE OpenStack Cloud 8:libtirpc-netconfig SUSE OpenStack Cloud 8:libtirpc1 SUSE OpenStack Cloud 8:libtirpc1-32bit SUSE OpenStack Cloud 8:libtirpc3 SUSE OpenStack Cloud 8:libtirpc3-32bit SUSE OpenStack Cloud 9:libtirpc SUSE OpenStack Cloud 9:libtirpc-netconfig SUSE OpenStack Cloud 9:libtirpc1 SUSE OpenStack Cloud 9:libtirpc1-32bit SUSE OpenStack Cloud 9:libtirpc3 SUSE OpenStack Cloud 9:libtirpc3-32bit SUSE OpenStack Cloud Crowbar 8:libtirpc SUSE OpenStack Cloud Crowbar 8:libtirpc-netconfig SUSE OpenStack Cloud Crowbar 8:libtirpc1 SUSE OpenStack Cloud Crowbar 8:libtirpc1-32bit SUSE OpenStack Cloud Crowbar 8:libtirpc3 SUSE OpenStack Cloud Crowbar 8:libtirpc3-32bit SUSE OpenStack Cloud Crowbar 9:libtirpc SUSE OpenStack Cloud Crowbar 9:libtirpc-netconfig SUSE OpenStack Cloud Crowbar 9:libtirpc1 SUSE OpenStack Cloud Crowbar 9:libtirpc1-32bit SUSE OpenStack Cloud Crowbar 9:libtirpc3 SUSE OpenStack Cloud Crowbar 9:libtirpc3-32bit critical 10 AV:N/AC:L/Au:N/C:C/I:C/A:C