CVE:CVE-2017-6594
CNNVD:CNNVD-201708-1171
Heimdal是一个Kerberos 5的实现。
Heimdal 7.3之前的版本中的transit path验证代码存在安全漏洞。攻击者可利用该漏洞绕过capath策略保护机制。
solution:Upgrade heimdal_project heimdal to a higher version than 7.2.0,and avoid the version (,7.2.0]; Upgrade opensuse leap to a higher version than 42.2,42.3,and avoid the version 42.2,42.3