CVE-2014-5352 - The krb5_gss_process_context_token function in lib/gssapi/krb5/process_context_token.c in the libgss

CVE-2014-5352

Summary

The krb5_gss_process_context_token function in lib/gssapi/krb5/process_context_token.c in the libgssapi_krb5 library in MIT Kerberos 5 (aka krb5) through 1.11.5, 1.12.x through 1.12.2, and 1.13.x before 1.13.1 does not properly maintain security-context handles, which allows remote authenticated users to cause a denial of service (use-after-free and double free, and daemon crash) or possibly execute arbitrary code via crafted GSSAPI traffic, as demonstrated by traffic to kadmind. <a href="http://cwe.mitre.org/data/definitions/416.html">CWE-416: Use After Free</a>

References

Vulnerable Configurations

cpe:2.3:a:mit:kerberos_5:1.11:*:*:*:*:*:*:*
cpe:2.3:a:mit:kerberos_5:1.11:*:*:*:*:*:*:*
cpe:2.3:a:mit:kerberos_5:1.11.1:*:*:*:*:*:*:*
cpe:2.3:a:mit:kerberos_5:1.11.1:*:*:*:*:*:*:*
cpe:2.3:a:mit:kerberos_5:1.11.2:*:*:*:*:*:*:*
cpe:2.3:a:mit:kerberos_5:1.11.2:*:*:*:*:*:*:*
cpe:2.3:a:mit:kerberos_5:1.11.3:*:*:*:*:*:*:*
cpe:2.3:a:mit:kerberos_5:1.11.3:*:*:*:*:*:*:*
cpe:2.3:a:mit:kerberos_5:1.11.4:*:*:*:*:*:*:*
cpe:2.3:a:mit:kerberos_5:1.11.4:*:*:*:*:*:*:*
cpe:2.3:a:mit:kerberos_5:1.11.5:*:*:*:*:*:*:*
cpe:2.3:a:mit:kerberos_5:1.11.5:*:*:*:*:*:*:*
cpe:2.3:a:mit:kerberos_5:1.12:*:*:*:*:*:*:*
cpe:2.3:a:mit:kerberos_5:1.12:*:*:*:*:*:*:*
cpe:2.3:a:mit:kerberos_5:1.12.1:*:*:*:*:*:*:*
cpe:2.3:a:mit:kerberos_5:1.12.1:*:*:*:*:*:*:*
cpe:2.3:a:mit:kerberos_5:1.12.2:*:*:*:*:*:*:*
cpe:2.3:a:mit:kerberos_5:1.12.2:*:*:*:*:*:*:*
cpe:2.3:a:mit:kerberos_5:1.13:*:*:*:*:*:*:*
cpe:2.3:a:mit:kerberos_5:1.13:*:*:*:*:*:*:*

CVSS

Base:	9.0 (as of 21-01-2020 - 15:46)
Impact:
Exploitability:

CWE

NVD-CWE-Other

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	LOW	SINGLE

Impact

Confidentiality	Integrity	Availability
COMPLETE	COMPLETE	COMPLETE

cvss-vector via4

AV:N/AC:L/Au:S/C:C/I:C/A:C

redhat via4

advisories

rhsa
id RHSA-2015:0439
rhsa
id RHSA-2015:0794

rpms

krb5-debuginfo-0:1.12.2-14.el7
krb5-devel-0:1.12.2-14.el7
krb5-libs-0:1.12.2-14.el7
krb5-pkinit-0:1.12.2-14.el7
krb5-server-0:1.12.2-14.el7
krb5-server-ldap-0:1.12.2-14.el7
krb5-workstation-0:1.12.2-14.el7
krb5-debuginfo-0:1.10.3-37.el6_6
krb5-devel-0:1.10.3-37.el6_6
krb5-libs-0:1.10.3-37.el6_6
krb5-pkinit-openssl-0:1.10.3-37.el6_6
krb5-server-0:1.10.3-37.el6_6
krb5-server-ldap-0:1.10.3-37.el6_6
krb5-workstation-0:1.10.3-37.el6_6

refmap via4

bid	72495
confirm	http://web.mit.edu/kerberos/advisories/2015-001-patch-r113.txt http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2015-001.txt https://github.com/krb5/krb5/commit/82dc33da50338ac84c7b4102dc6513d897d0506a
debian	DSA-3153
fedora	FEDORA-2015-2347 FEDORA-2015-2382
mandriva	MDVSA-2015:069
suse	SUSE-SU-2015:0257 SUSE-SU-2015:0290 openSUSE-SU-2015:0255
ubuntu	USN-2498-1

Last major update

21-01-2020 - 15:46

Published

19-02-2015 - 11:59

Last modified

21-01-2020 - 15:46