Description
lib/gssapi/spnego/spnego_mech.c in MIT Kerberos 5 (aka krb5) before 1.14 relies on an inappropriate context handle, which allows remote attackers to cause a denial of service (incorrect pointer read and process crash) via a crafted SPNEGO packet that is mishandled during a gss_inquire_context call.
Scores
EPSS
0.0539
EPSS Percentile
90.2%
Details
CWE
CWE-763
Status
published
Products (18)
canonical/ubuntu_linux
12.04
canonical/ubuntu_linux
14.04
canonical/ubuntu_linux
15.04
canonical/ubuntu_linux
15.10
debian/debian_linux
7.0
debian/debian_linux
8.0
debian/debian_linux
9.0
mit/kerberos_5
< 1.14
opensuse/leap
42.1
opensuse/opensuse
13.1
... and 8 more
Published
Nov 09, 2015
Tracked Since
Feb 18, 2026