MIT Kerberos 5 (aka krb5) 1.7.x through 1.12.x before 1.12.2 allows remote attackers to cause a denial of service (buffer over-read or NULL pointer dereference, and application crash) by injecting invalid tokens into a GSSAPI application session.
References
| Link | Resource |
|---|---|
| http://advisories.mageia.org/MGASA-2014-0345.html | Third Party Advisory |
| http://krbdev.mit.edu/rt/Ticket/Display.html?id=7949 | Issue Tracking Vendor Advisory |
| http://rhn.redhat.com/errata/RHSA-2015-0439.html | Third Party Advisory |
| http://secunia.com/advisories/59102 | Not Applicable |
| http://secunia.com/advisories/60082 | Not Applicable |
| http://www.debian.org/security/2014/dsa-3000 | Third Party Advisory |
| http://www.mandriva.com/security/advisories?name=MDVSA-2014:165 | Third Party Advisory |
| http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html | Patch Third Party Advisory VDB Entry |
| http://www.securityfocus.com/bid/68908 | Third Party Advisory VDB Entry |
| http://www.securitytracker.com/id/1030706 | Third Party Advisory VDB Entry |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/94903 | Third Party Advisory VDB Entry |
| https://github.com/krb5/krb5/commit/e6ae703ae597d798e310368d52b8f38ee11c6a73 | Patch Issue Tracking Third Party Advisory |
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
|
History
No history.
Information
Published : 2014-07-20 11:12
Updated : 2023-12-10 11:31
NVD link : CVE-2014-4342
Mitre link : CVE-2014-4342
CVE.ORG link : CVE-2014-4342
JSON object : View
Products Affected
redhat
- enterprise_linux_desktop
- enterprise_linux_workstation
- enterprise_linux_server
- enterprise_linux_hpc_node
debian
- debian_linux
mit
- kerberos
- kerberos_5
CWE
CWE-119
Improper Restriction of Operations within the Bounds of a Memory Buffer