CVE-2014-5355

MIT Kerberos 5 through 1.13.1 - Denial of Service via Malformed krb5_read_message Data Field

Title source: llm
STIX 2.1

Description

MIT Kerberos 5 (aka krb5) through 1.13.1 incorrectly expects that a krb5_read_message data field is represented as a string ending with a '\0' character, which allows remote attackers to (1) cause a denial of service (NULL pointer dereference) via a zero-byte version string or (2) cause a denial of service (out-of-bounds read) by omitting the '\0' character, related to appl/user_user/server.c and lib/krb5/krb/recvauth.c.

References (10)

Core 10
Core References
Mailing List mailing-list x_refsource_mlist
https://lists.debian.org/debian-lts-announce/2018/01/msg00040.html
Mailing List vendor-advisory x_refsource_suse
http://lists.opensuse.org/opensuse-updates/2015-03/msg00061.html
Vendor Advisory vendor-advisory x_refsource_mandriva
http://www.mandriva.com/security/advisories?name=MDVSA-2015:069
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/74042
Vendor Advisory x_refsource_confirm
http://krbdev.mit.edu/rt/Ticket/Display.html?id=8050
Vendor Advisory vendor-advisory x_refsource_ubuntu
http://www.ubuntu.com/usn/USN-2810-1
Vendor Advisory vendor-advisory x_refsource_redhat
http://rhn.redhat.com/errata/RHSA-2015-0794.html

Scores

EPSS 0.0820
EPSS Percentile 92.3%

Details

Status published
Products (49)
mit/kerberos_5 1.1
mit/kerberos_5 1.2
mit/kerberos_5 1.2.1
mit/kerberos_5 1.2.2
mit/kerberos_5 1.2.3
mit/kerberos_5 1.2.4
mit/kerberos_5 1.2.5
mit/kerberos_5 1.2.6
mit/kerberos_5 1.2.7
mit/kerberos_5 1.2.8
... and 39 more
Published Feb 20, 2015
Tracked Since Feb 18, 2026