PT-2017-13867 · Mit+2 · Mit Kerberos 5+2

Adam Mariš · Published 2017-11-08 · Updated 2021-01-26 · CVE-2017-15088

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions MIT Kerberos 5 (aka krb5) versions 1.15.2 and earlier

Description The issue concerns the mishandling of Distinguished Name (DN) fields in untrusted X.509 data, which can lead to the execution of arbitrary code or cause a denial of service due to a buffer overflow and application crash. This is related to the get matching data and X509 NAME oneline ex functions. The security relevance of this issue is primarily outside of the MIT Kerberos distribution, such as in the use of get matching data in KDC certauth plugin code specific to Red Hat.

Recommendations For versions 1.15.2 and earlier, update to a version later than 1.15.2 to resolve the issue.

Fix

RCE

DoS

Buffer Overflow

Stack Overflow

Weakness Enumeration

CWE-119

CWE-121

Related Identifiers

ALT-PU-2018-1070

CVE-2017-15088

MGASA-2017-0420

OPENSUSE-SU-2017_2993-1

SUSE-SU-2017:2948-1

SUSE-SU-2017_2948-1

Affected Products

Alt Linux

Mit Kerberos 5

Suse

References · 31

• https://github.com/krb5/krb5/commit/fbb687db1088ddd894d975996e5f6a4252b9a2b4 · Patch
• https://github.com/krb5/krb5/pull/707 · Patch
• https://advisories.mageia.org/MGASA-2017-0420.html · Security Note
• https://osv.dev/vulnerability/ALPINE-CVE-2017-15088 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15088 · Security Note
• https://osv.dev/vulnerability/MGASA-2017-0420 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2017:2948-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2017-15088 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2017-15088 · Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=1504045 · Patch
• https://osv.dev/vulnerability/CVE-2017-15088 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-15088 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2017-15088 · Vendor Advisory
• https://errata.altlinux.org/ALT-PU-2018-1070 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/[e-mail]/thread/2FPRUP4YVOEBGEROUYWZFEQ64HTMGNED · Vendor Advisory