sin/samba-mirror
1
0
Fork 0
mirror of https://github.com/samba-team/samba.git synced 2025-01-25 06:04:04 +03:00
Code

CVE-2022-37966 s4:kdc: also limit the krbtgt history to their strongest keys

Browse Source 
BUG: https://bugzilla.samba.org/show_bug.cgi?id=15237

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Joseph Sutton <josephsutton@catalyst.net.nz>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
This commit is contained in:
Stefan Metzmacher 2022-12-04 21:05:39 +01:00
parent 4bb50c868c
commit 6b46b764fc
1 changed files with 2 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
source4/kdc/db-glue.c
View File

@ -1521,6 +1521,8 @@ static krb5_error_code samba_kdc_message2entry(krb5_context context,
if (entry->etypes != NULL) { if (entry->etypes != NULL) {
entry->etypes->len = 1; entry->etypes->len = 1;
} }
entry->old_keys.len = MIN(entry->old_keys.len, 1);
entry->older_keys.len = MIN(entry->older_keys.len, 1);
} }
#endif #endif
} else if (kdc_db_ctx->rodc) { } else if (kdc_db_ctx->rodc) {