CVE-2015-2695
MIT Kerberos 5 < 1.14 - Denial of Service
Title source: ruleDescription
lib/gssapi/spnego/spnego_mech.c in MIT Kerberos 5 (aka krb5) before 1.14 relies on an inappropriate context handle, which allows remote attackers to cause a denial of service (incorrect pointer read and process crash) via a crafted SPNEGO packet that is mishandled during a gss_inquire_context call.
Scores
EPSS
0.0539
EPSS Percentile
90.0%
Classification
CWE
CWE-763
Status
draft
Affected Products (21)
mit/kerberos_5
< 1.14
oracle/solaris
canonical/ubuntu_linux
canonical/ubuntu_linux
canonical/ubuntu_linux
canonical/ubuntu_linux
debian/debian_linux
debian/debian_linux
debian/debian_linux
opensuse/leap
opensuse/opensuse
opensuse/opensuse
suse/linux_enterprise_desktop
suse/linux_enterprise_desktop
suse/linux_enterprise_desktop
... and 6 more
Timeline
Published
Nov 09, 2015
Tracked Since
Feb 18, 2026