PT-2016-3939 · Mit+4 · Mit Kerberos 5+4

Greg Hudson · Published 2016-02-04 · Updated 2024-06-15 · CVE-2015-8629

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions MIT Kerberos 5 (krb5) versions prior to 1.13.4 MIT Kerberos 5 (krb5) versions 1.14.x prior to 1.14.1

Description The issue allows remote authenticated users to obtain sensitive information or cause a denial of service due to an out-of-bounds read. This is caused by the xdr nullstring function in lib/kadm5/kadm rpc xdr.c in kadmind not verifying whether '0' characters exist as expected, allowing exploitation via a crafted string.

Recommendations For versions prior to 1.13.4, update to version 1.13.4 or later. For versions 1.14.x prior to 1.14.1, update to version 1.14.1 or later.

Fix

DoS

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

ALT-PU-2016-1392

CESA-2016_0493

CESA-2016_0532

CVE-2015-8629

DLA-423-1

DSA-3466-1

MGASA-2016-0052

OPENSUSE-SU-2024:10004-1

RHSA-2016:0493

RHSA-2016:0532

RHSA-2016_0493

RHSA-2016_0532

SUSE-SU-2016:0429-1

SUSE-SU-2016:0430-1

SUSE-SU-2016_0429-1

SUSE-SU-2016_0430-1

Affected Products

Alt Linux

Centos

Mit Kerberos 5

Red Hat

Suse

References · 89

• https://github.com/krb5/krb5/commit/df17a1224a3406f57477bcd372c61e04c0e5a5bb · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2015-8629 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2024:10004-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2015-8629 · Vendor Advisory
• http://lists.opensuse.org/opensuse-updates/2016-02/msg00059.html · Vendor Advisory
• https://osv.dev/vulnerability/ALPINE-CVE-2015-8629 · Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2016-0493.html · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2015-8629 · Vendor Advisory
• http://lists.opensuse.org/opensuse-updates/2016-02/msg00110.html · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2016-0052 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2016:0430-1 · Vendor Advisory
• https://lists.fedoraproject.org/pipermail/package-announce/2016-January/176451.html · Vendor Advisory
• http://debian.org/security/2016/dsa-3466 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2016-0052.html · Security Note
• https://ubuntu.com/security/CVE-2015-8629 · Vendor Advisory