PT-2015-4193 · Mit+6 · Mit Kerberos 5+6

Published 2015-01-21 · Updated 2024-06-15 · CVE-2014-9421

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions MIT Kerberos 5 versions 1.11.5 and earlier MIT Kerberos 5 versions 1.12.x through 1.12.2 MIT Kerberos 5 versions 1.13.x before 1.13.1

Description The issue is related to the auth gssapi unwrap data function, which does not properly handle partial XDR deserialization. This allows remote authenticated users to cause a denial of service, including use-after-free and double free, and daemon crash, or possibly execute arbitrary code via malformed XDR data. The vulnerability can be exploited by sending malformed data to kadmind.

Recommendations For MIT Kerberos 5 versions 1.11.5 and earlier, update to version 1.11.6 or later. For MIT Kerberos 5 versions 1.12.x through 1.12.2, update to version 1.12.3 or later. For MIT Kerberos 5 versions 1.13.x before 1.13.1, update to version 1.13.1 or later. As a temporary workaround, consider restricting access to the kadmind service until a patch is available.

Fix

Related Identifiers

ALT-PU-2015-1151

ALT-PU-2015-1195

CESA-2015_0439

CESA-2015_0794

CVE-2014-9421

DLA-146-1

DSA-3153-1

MGASA-2015-0066

OPENSUSE-SU-2024:10004-1

RHSA-2015:0439

RHSA-2015:0794

RHSA-2015_0439

RHSA-2015_0794

SUSE-SU-2015:0257-1

SUSE-SU-2015:0290-1

SUSE-SU-2015:0290-2

USN-2498-1

Affected Products

Alt Linux

Centos

Ibm Aix

Mit Kerberos 5

Red Hat

Suse

Ubuntu

References · 99

• https://advisories.mageia.org/MGASA-2015-0066.html · Security Note
• https://ubuntu.com/security/CVE-2014-9422 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2014-9421 · Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2015-0439.html · Vendor Advisory
• http://ubuntu.com/usn/USN-2498-1 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:10004-1 · Vendor Advisory
• https://debian.org/security/2015/dsa-3153 · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00016.html · Vendor Advisory
• https://ubuntu.com/security/CVE-2014-9423 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2015-0439.html · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2015:0290-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2014-5353 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2015-0066 · Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2015-0794.html · Vendor Advisory
• https://ubuntu.com/security/CVE-2014-5351 · Vendor Advisory