CVE:CVE-2020-10595
CNNVD:CNNVD-202003-1738
pam-krb5是一款用于Kerberos身份验证的PAM模块。
pam-krb5 4.9之前版本中存在缓冲区错误漏洞，该漏洞源于不正确的边界检查。远程攻击者可借助特制请求利用该漏洞在受影响的系统上执行任意代码。
solution:Upgrade pam-krb5_project pam-krb5 to a higher version than 4.9,and avoid the version (,4.9); Upgrade debian debian_linux to a higher version than 8.0,9.0,10.0,and avoid the version 8.0,9.0,10.0