Pam-Krb5 Project Pam-Krb5 vulnerabilities

CVE-2020-10595 [CRITICAL] CWE-120 CVE-2020-10595: pam-krb5 before 4.9 has a buffer overflow that might cause remote code execution in situations invol pam-krb5 before 4.9 has a buffer overflow that might cause remote code execution in situations involving supplemental prompting by a Kerberos library. It may overflow a buffer provided by the underlying Kerberos library by a single '\0' byte if an attacker responds to a prompt with an answer of a carefully chosen length. The effect may range from