PT-2014-6430 · Mit+5 · Mit Kerberos 5+5

Patrik Kis

·

Publicado

2014-12-16

·

Atualizado

2024-06-15

·

CVE-2014-5353

CVSS v2.0

3.5

Baixa

VetorAV:N/AC:M/Au:S/C:N/I:N/A:P
Name of the Vulnerable Software and Affected Versions MIT Kerberos 5 versions prior to 1.13.1
Description The issue allows remote authenticated users to cause a denial of service, resulting in a daemon crash. This can be achieved by sending a successful LDAP query with no results, for example, by using an incorrect object type for a password policy.
Recommendations For versions prior to 1.13.1, update to version 1.13.1 or later to resolve the issue.

Correção

DoS

NULL Pointer Dereference

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-476

Identificadores relacionados

ALT-PU-2014-2482
ALT-PU-2015-1195
CESA-2015_0439
CESA-2015_0794
CVE-2014-5353
DLA-1265-1
MGASA-2014-0536
OPENSUSE-SU-2024:10004-1
RHSA-2015:0439
RHSA-2015:0794
RHSA-2015_0439
RHSA-2015_0794
SUSE-SU-2015:1276-1
SUSE-SU-2015:1282-1
SUSE-SU-2015_1276-1
SUSE-SU-2015_1282-1
USN-2498-1

Produtos afetados

Alt Linux
Centos
Mit Kerberos 5
Red Hat
Suse
Ubuntu