Red Hat Security Advisory

RHSA-2015:0439

krb5 security, bug fix and enhancement update

Released 2015-03-05 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Client (v. 7) krb5-1.12.2-14.el7, krb5-libs-1.12.2-14.el7, krb5-pkinit-1.12.2-14.el7 +1
Red Hat Enterprise Linux Client Optional (v. 7) krb5-devel-1.12.2-14.el7, krb5-server-1.12.2-14.el7, krb5-server-ldap-1.12.2-14.el7
Red Hat Enterprise Linux ComputeNode (v. 7) krb5-1.12.2-14.el7, krb5-libs-1.12.2-14.el7, krb5-pkinit-1.12.2-14.el7 +1
Red Hat Enterprise Linux ComputeNode Optional (v. 7) krb5-devel-1.12.2-14.el7, krb5-server-1.12.2-14.el7, krb5-server-ldap-1.12.2-14.el7
Red Hat Enterprise Linux Server (v. 7) krb5-1.12.2-14.el7, krb5-devel-1.12.2-14.el7, krb5-devel-1.12.2-14.el7.ppc +6
Red Hat Enterprise Linux Workstation (v. 7) krb5-1.12.2-14.el7, krb5-devel-1.12.2-14.el7, krb5-libs-1.12.2-14.el7 +4

Fixes 10 records

TI-2014-07648 CVE-2014-9421 · GHSA-cv75-v3vc-j2vj

The auth_gssapi_unwrap_data function in lib/rpc/auth_gssapi_misc.c in MIT Kerberos 5 (aka…

MEDIUM 48

The auth_gssapi_unwrap_data function in lib/rpc/auth_gssapi_misc.c in MIT Kerberos 5 (aka krb5) through 1.11.5, 1.12.x through 1.12.2, and 1.13.x before 1.13.1 does not properly handle partial XDR deserialization, which…

CVSS 2.0HIGH 9.0 Network Low privileges Interaction — EPSS 0.06213 Published 2015-02-19 Partial fix

TI-2014-04368 CVE-2014-5352 · GHSA-vmgh-h88m-58mj

The krb5_gss_process_context_token function in lib/gssapi/krb5/process_context_token.c in…

MEDIUM 48

The krb5_gss_process_context_token function in lib/gssapi/krb5/process_context_token.c in the libgssapi_krb5 library in MIT Kerberos 5 (aka krb5) through 1.11.5, 1.12.x through 1.12.2, and 1.13.x before 1.13.1 does not p…

CVSS 2.0HIGH 9.0 Network Low privileges Interaction — EPSS 0.06213 Published 2015-02-19 Partial fix

TI-2014-03553 CVE-2014-4345 · GHSA-j7xf-33rr-9jmv

Off-by-one error in the krb5_encode_krbsecretkey function in…

MEDIUM 48

Off-by-one error in the krb5_encode_krbsecretkey function in plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c in the LDAP KDB module in kadmind in MIT Kerberos 5 (aka krb5) 1.6.x through 1.11.x before 1.11.6 and 1.12.x bef…

CVSS 2.0HIGH 8.5 Network Low privileges Interaction — EPSS 0.08085 Published 2014-08-14 Fixed CWE-189

TI-2014-03552 CVE-2014-4344 · GHSA-335x-2h4v-298w

The acc_ctx_cont function in the SPNEGO acceptor in lib/gssapi/spnego/spnego_mech.c in…

MEDIUM 44

The acc_ctx_cont function in the SPNEGO acceptor in lib/gssapi/spnego/spnego_mech.c in MIT Kerberos 5 (aka krb5) 1.5.x through 1.12.x before 1.12.2 allows remote attackers to cause a denial of service (NULL pointer deref…

CVSS 2.0HIGH 7.8 Network No auth Interaction — EPSS 0.06614 Published 2014-08-14 Fixed CWE-476

TI-2014-03551 CVE-2014-4343 · GHSA-cmrr-h89w-fc55

Double free vulnerability in the init_ctx_reselect function in the SPNEGO initiator in…

MEDIUM 43

Double free vulnerability in the init_ctx_reselect function in the SPNEGO initiator in lib/gssapi/spnego/spnego_mech.c in MIT Kerberos 5 (aka krb5) 1.10.x through 1.12.x before 1.12.2 allows remote attackers to cause a d…

CVSS 2.0HIGH 7.6 Network No auth Interaction — EPSS 0.06419 Published 2014-08-14 Fixed CWE-415

TI-2014-03549 CVE-2014-4341 · GHSA-qq5g-rggx-4f8p

MIT Kerberos 5 (aka krb5) before 1.12.2 allows remote attackers to cause a denial of…

LOW 33

MIT Kerberos 5 (aka krb5) before 1.12.2 allows remote attackers to cause a denial of service (buffer over-read and application crash) by injecting invalid tokens into a GSSAPI application session.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.07138 Published 2014-07-20 Fixed CWE-125

TI-2014-07649 CVE-2014-9422 · GHSA-8qhp-h7xw-f46m

The check_rpcsec_auth function in kadmin/server/kadm_rpc_svc.c in kadmind in MIT Kerberos…

LOW 32

The check_rpcsec_auth function in kadmin/server/kadm_rpc_svc.c in kadmind in MIT Kerberos 5 (aka krb5) through 1.11.5, 1.12.x through 1.12.2, and 1.13.x before 1.13.1 allows remote authenticated users to bypass a kadmin/…

CVSS 2.0MEDIUM 6.1 Network Low privileges Interaction — EPSS 0.02726 Published 2015-02-19 Partial fix CWE-284

TI-2014-03550 CVE-2014-4342 · GHSA-734c-f6jq-56f9

MIT Kerberos 5 (aka krb5) 1.7.x through 1.12.x before 1.12.2 allows remote attackers to…

LOW 32

MIT Kerberos 5 (aka krb5) 1.7.x through 1.12.x before 1.12.2 allows remote attackers to cause a denial of service (buffer over-read or NULL pointer dereference, and application crash) by injecting invalid tokens into a G…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.06523 Published 2014-07-20 Fixed CWE-119

TI-2014-07650 CVE-2014-9423 · GHSA-c8r5-76c4-8w9w

The svcauth_gss_accept_sec_context function in lib/rpc/svc_auth_gss.c in MIT Kerberos 5…

LOW 29

The svcauth_gss_accept_sec_context function in lib/rpc/svc_auth_gss.c in MIT Kerberos 5 (aka krb5) 1.11.x through 1.11.5, 1.12.x through 1.12.2, and 1.13.x before 1.13.1 transmits uninitialized interposer data to clients…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.0389 Published 2015-02-19 Fixed CWE-200

TI-2014-04369 CVE-2014-5353 · GHSA-x6p8-9r6f-f728

The krb5_ldap_get_password_policy_from_dn function in…

LOW 25

The krb5_ldap_get_password_policy_from_dn function in plugins/kdb/ldap/libkdb_ldap/ldap_pwd_policy.c in MIT Kerberos 5 (aka krb5) before 1.13.1, when the KDC uses LDAP, allows remote authenticated users to cause a denial…

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.04968 Published 2014-12-16 Partial fix CWE-476