PT-2015-4195 · Mit+6 · Mit Kerberos 5+6

Published 2015-01-21 · Updated 2024-06-15 · CVE-2014-9423

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions MIT Kerberos 5 (krb5) versions 1.11.x through 1.11.5 MIT Kerberos 5 (krb5) versions 1.12.x through 1.12.2 MIT Kerberos 5 (krb5) versions 1.13.x prior to 1.13.1

Description The issue allows remote attackers to obtain sensitive information from process heap memory by sniffing the network for data in a handle field. This is due to the svcauth gss accept sec context function transmitting uninitialized interposer data to clients.

Recommendations For versions 1.11.x through 1.11.5, update to version 1.11.6 or later. For versions 1.12.x through 1.12.2, update to version 1.12.3 or later. For versions 1.13.x prior to 1.13.1, update to version 1.13.1 or later. As a temporary workaround, consider restricting access to the svcauth gss accept sec context function until a patch is available.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

ALT-PU-2015-1151

ALT-PU-2015-1195

CESA-2015_0439

CVE-2014-9423

DLA-146-1

DSA-3153-1

MGASA-2015-0066

OPENSUSE-SU-2024:10004-1

RHSA-2015:0439

RHSA-2015_0439

SUSE-SU-2015:0257-1

SUSE-SU-2015:0290-1

SUSE-SU-2015:0290-2

USN-2498-1

Affected Products

Alt Linux

Centos

Ibm Aix

Mit Kerberos 5

Red Hat

Suse

Ubuntu

References · 97

• https://advisories.mageia.org/MGASA-2015-0066.html · Security Note
• https://ubuntu.com/security/CVE-2014-9422 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2014-9423 · Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2015-0439.html · Vendor Advisory
• http://ubuntu.com/usn/USN-2498-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2014-9423 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2024:10004-1 · Vendor Advisory
• https://debian.org/security/2015/dsa-3153 · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00016.html · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2014-9423 · Security Note
• https://linux.oracle.com/errata/ELSA-2015-0439.html · Vendor Advisory
• https://ubuntu.com/security/CVE-2014-9423 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2015:0290-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2014-5353 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2015-0066 · Vendor Advisory