usn-2498-1
Vulnerability from osv_ubuntu
Published
2015-02-10 20:04
Modified
2026-04-22 07:36
Summary
krb5 vulnerabilities
Details

It was discovered that Kerberos incorrectly sent old keys in response to a -randkey -keepold request. An authenticated remote attacker could use this issue to forge tickets by leveraging administrative access. This issue only affected Ubuntu 10.04 LTS, Ubuntu 12.04 LTS and Ubuntu 14.04 LTS. (CVE-2014-5351)

It was discovered that the libgssapi_krb5 library incorrectly processed security context handles. A remote attacker could use this issue to cause a denial of service, or possibly execute arbitrary code. (CVE-2014-5352)

Patrik Kis discovered that Kerberos incorrectly handled LDAP queries with no results. An authenticated remote attacker could use this issue to cause the KDC to crash, resulting in a denial of service. (CVE-2014-5353)

It was discovered that Kerberos incorrectly handled creating database entries for a keyless principal when using LDAP. An authenticated remote attacker could use this issue to cause the KDC to crash, resulting in a denial of service. (CVE-2014-5354)

It was discovered that Kerberos incorrectly handled memory when processing XDR data. A remote attacker could use this issue to cause kadmind to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2014-9421)

It was discovered that Kerberos incorrectly handled two-component server principals. A remote attacker could use this issue to perform impersonation attacks. (CVE-2014-9422)

It was discovered that the libgssrpc library leaked uninitialized bytes. A remote attacker could use this issue to possibly obtain sensitive information. (CVE-2014-9423)

References
To clipboard 

{
  "affected": [
    {
      "database_specific": {
        "cves_map": {
          "cves": [
            {
              "id": "CVE-2014-5351",
              "severity": [
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2014-5352",
              "severity": [
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2014-5353",
              "severity": [
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2014-5354",
              "severity": [
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2014-9421",
              "severity": [
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2014-9422",
              "severity": [
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2014-9423",
              "severity": [
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            }
          ],
          "ecosystem": "Ubuntu:14.04:LTS"
        }
      },
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "krb5-admin-server",
            "binary_version": "1.12+dfsg-2ubuntu5.1"
          },
          {
            "binary_name": "krb5-gss-samples",
            "binary_version": "1.12+dfsg-2ubuntu5.1"
          },
          {
            "binary_name": "krb5-kdc",
            "binary_version": "1.12+dfsg-2ubuntu5.1"
          },
          {
            "binary_name": "krb5-kdc-ldap",
            "binary_version": "1.12+dfsg-2ubuntu5.1"
          },
          {
            "binary_name": "krb5-locales",
            "binary_version": "1.12+dfsg-2ubuntu5.1"
          },
          {
            "binary_name": "krb5-multidev",
            "binary_version": "1.12+dfsg-2ubuntu5.1"
          },
          {
            "binary_name": "krb5-otp",
            "binary_version": "1.12+dfsg-2ubuntu5.1"
          },
          {
            "binary_name": "krb5-pkinit",
            "binary_version": "1.12+dfsg-2ubuntu5.1"
          },
          {
            "binary_name": "krb5-user",
            "binary_version": "1.12+dfsg-2ubuntu5.1"
          },
          {
            "binary_name": "libgssapi-krb5-2",
            "binary_version": "1.12+dfsg-2ubuntu5.1"
          },
          {
            "binary_name": "libgssrpc4",
            "binary_version": "1.12+dfsg-2ubuntu5.1"
          },
          {
            "binary_name": "libk5crypto3",
            "binary_version": "1.12+dfsg-2ubuntu5.1"
          },
          {
            "binary_name": "libkadm5clnt-mit9",
            "binary_version": "1.12+dfsg-2ubuntu5.1"
          },
          {
            "binary_name": "libkadm5srv-mit8",
            "binary_version": "1.12+dfsg-2ubuntu5.1"
          },
          {
            "binary_name": "libkadm5srv-mit9",
            "binary_version": "1.12+dfsg-2ubuntu5.1"
          },
          {
            "binary_name": "libkdb5-7",
            "binary_version": "1.12+dfsg-2ubuntu5.1"
          },
          {
            "binary_name": "libkrad0",
            "binary_version": "1.12+dfsg-2ubuntu5.1"
          },
          {
            "binary_name": "libkrb5-3",
            "binary_version": "1.12+dfsg-2ubuntu5.1"
          },
          {
            "binary_name": "libkrb5support0",
            "binary_version": "1.12+dfsg-2ubuntu5.1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:14.04:LTS",
        "name": "krb5",
        "purl": "pkg:deb/ubuntu/krb5@1.12+dfsg-2ubuntu5.1?arch=source\u0026distro=trusty"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.12+dfsg-2ubuntu5.1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1.10.1+dfsg-6.1ubuntu1",
        "1.11.3+dfsg-3ubuntu2",
        "1.12+dfsg-2ubuntu1",
        "1.12+dfsg-2ubuntu2",
        "1.12+dfsg-2ubuntu3",
        "1.12+dfsg-2ubuntu4",
        "1.12+dfsg-2ubuntu4.2",
        "1.12+dfsg-2ubuntu5"
      ]
    }
  ],
  "aliases": [],
  "details": "It was discovered that Kerberos incorrectly sent old keys in response to a\n-randkey -keepold request. An authenticated remote attacker could use this\nissue to forge tickets by leveraging administrative access. This issue\nonly affected Ubuntu 10.04 LTS, Ubuntu 12.04 LTS and Ubuntu 14.04 LTS.\n(CVE-2014-5351)\n\nIt was discovered that the libgssapi_krb5 library incorrectly processed\nsecurity context handles. A remote attacker could use this issue to cause\na denial of service, or possibly execute arbitrary code. (CVE-2014-5352)\n\nPatrik Kis discovered that Kerberos incorrectly handled LDAP queries with\nno results. An authenticated remote attacker could use this issue to cause\nthe KDC to crash, resulting in a denial of service. (CVE-2014-5353)\n\nIt was discovered that Kerberos incorrectly handled creating database\nentries for a keyless principal when using LDAP. An authenticated remote\nattacker could use this issue to cause the KDC to crash, resulting in a\ndenial of service. (CVE-2014-5354)\n\nIt was discovered that Kerberos incorrectly handled memory when processing\nXDR data. A remote attacker could use this issue to cause kadmind to crash,\nresulting in a denial of service, or possibly execute arbitrary code.\n(CVE-2014-9421)\n\nIt was discovered that Kerberos incorrectly handled two-component server\nprincipals. A remote attacker could use this issue to perform impersonation\nattacks. (CVE-2014-9422)\n\nIt was discovered that the libgssrpc library leaked uninitialized bytes. A\nremote attacker could use this issue to possibly obtain sensitive\ninformation. (CVE-2014-9423)\n",
  "id": "USN-2498-1",
  "modified": "2026-04-22T07:36:32Z",
  "published": "2015-02-10T20:04:14Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-2498-1"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2014-5351"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2014-5352"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2014-5353"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2014-5354"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2014-9421"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2014-9422"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2014-9423"
    }
  ],
  "related": [],
  "schema_version": "1.7.0",
  "summary": "krb5 vulnerabilities",
  "upstream": [
    "UBUNTU-CVE-2014-5351",
    "UBUNTU-CVE-2014-5352",
    "UBUNTU-CVE-2014-5353",
    "UBUNTU-CVE-2014-5354",
    "UBUNTU-CVE-2014-9421",
    "UBUNTU-CVE-2014-9422",
    "UBUNTU-CVE-2014-9423"
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.