CVE-2007-5471: libgssapi before 0.6-13.7, as used by the ISC BIND named daemon in SUSE Linux Enterprise Server 10 SP 1, te...

Security readout for executives and security teams

This flaw can let a remote attacker crash the BIND named DNS daemon on affected SUSE Linux Enterprise Server 10 SP1 systems by sending a GSS-TSIG request. The business impact is service interruption, not data theft. Evidence points to an older, configuration-sensitive issue in libgssapi. Exposure is most likely on legacy SLES 10 SP1 DNS servers running BIND named with vulnerable libgssapi and GSS-TSIG handling. Other chrooted or misconfigured daemons using the same library may also be exposed, but sources do not identify specific products. Treat this as a legacy DNS availability risk. Prioritize remediation where affected systems provide business-critical name resolution or are reachable by untrusted networks. The urgency is lower than code execution issues, but DNS outages can cause broad operational disruption. Mitigation focus: Upgrade libgssapi to 0.6-13.7 or a later vendor-supported package.; Apply the relevant SUSE or Novell security update for affected SLES 10 SP1 systems.; Review chroot and service configuration for daemons that initialize libgssapi..

Prepared

Jun 29, 2026, 02:29 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.