CVE-2014-5352 The krb5_gss_process_context_token function in lib/gssapi/krb5/process_context_token.c in the libgssapi_krb5 library in MIT Kerberos 5 (aka krb5) through 1.11.5, 1.12.x through 1.12.2, and 1.13.x befo...
HighCVSS 9.0
EPSS 6.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The krb5_gss_process_context_token function in lib/gssapi/krb5/process_context_token.c in the libgssapi_krb5 library in MIT Kerberos 5 (aka krb5) through 1.11.5, 1.12.x through 1.12.2, and 1.13.x before 1.13.1 does not properly maintain security-context handles, which allows remote authenticated users to cause a denial of service (use-after-free and double free, and daemon crash) or possibly execute arbitrary code via crafted GSSAPI traffic, as demonstrated by traffic to kadmind.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/krb5(Debian:12) | < 1.12.1+dfsg-17 | 1.12.1+dfsg-17 |
| debian/krb5(Debian:13) | < 1.12.1+dfsg-17 | 1.12.1+dfsg-17 |
| debian/krb5(Debian:14) | < 1.12.1+dfsg-17 | 1.12.1+dfsg-17 |
| mit kerberos 5 | = 1.11 | No fix listed |
| mit kerberos 5 | = 1.11.1 | No fix listed |
| mit kerberos 5 | = 1.11.2 | No fix listed |
| mit kerberos 5 | = 1.11.3 | No fix listed |
| mit kerberos 5 | = 1.11.4 | No fix listed |
| mit kerberos 5 | = 1.11.5 | No fix listed |
| mit kerberos 5 | = 1.12 | No fix listed |
| mit kerberos 5 | = 1.12.1 | No fix listed |
| mit kerberos 5 | = 1.12.2 | No fix listed |
| mit kerberos 5 | = 1.13 | No fix listed |
References
- Debian Security Tracker CVE-2014-5352 vendor-advisory
- FEDORA-2015-2382 vendor-advisory
- FEDORA-2015-2347 vendor-advisory
- SUSE-SU-2015:0257 vendor-advisory
- SUSE-SU-2015:0290 vendor-advisory
- openSUSE-SU-2015:0255 vendor-advisory
- RHSA-2015:0439 vendor-advisory
- RHSA-2015:0794 vendor-advisory
- web.mit.edu
- web.mit.edu
- DSA-3153 vendor-advisory
- MDVSA-2015:069 vendor-advisory
- 72495 vdb-entry
- USN-2498-1 vendor-advisory
- github.com vendor-advisory