heimdal

Files

Nicolas Williams 7a19658c1f spnego: Fix NULL deref

Reported to Heimdal by Michał Kępień <michal@isc.org>.

From the report:

Acknowledgement
---------------

This flaw was found while working on addressing ZDI-CAN-12302: ISC BIND
TKEY Query Heap-based Buffer Overflow Remote Code Execution
Vulnerability, which was reported to ISC by Trend Micro's Zero Day
Initiative.

2021-11-11 22:41:13 -06:00

accept_sec_context.c

spnego: Fix NULL deref

2021-11-11 22:41:13 -06:00

compat.c

Properly implement neg_mechs & GM_USE_MG_CRED

2020-04-21 00:21:32 -05:00

context_storage.c

gss: don't include mech_locl.h in spnego

2021-08-11 19:12:11 +10:00

context_stubs.c

gss: _gss_spnego_set_sec_context_option return