CVE-2014-4341

Published: Jul 20, 2014Modified: May 6, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

MIT Kerberos 5 (aka krb5) before 1.12.2 allows remote attackers to cause a denial of service (buffer over-read and application crash) by injecting invalid tokens into a GSSAPI application session.

Affected (22)

Products: Mit: Kerberos 5 · Redhat: Enterprise Linux Desktop, Enterprise Linux Eus, Enterprise Linux Server, Enterprise Linux Server Aus, Enterprise Linux Server Eus, Enterprise Linux Tus, Enterprise Linux Workstation · Debian: Debian Linux · +1 more

Show all products

Mit: Kerberos 5 · Redhat: Enterprise Linux Desktop, Enterprise Linux Eus, Enterprise Linux Server, Enterprise Linux Server Aus, Enterprise Linux Server Eus, Enterprise Linux Tus, Enterprise Linux Workstation · Debian: Debian Linux · Fedoraproject: Fedora

1 product

7 products

Enterprise Linux Desktop

Enterprise Linux Eus

Enterprise Linux Server

Enterprise Linux Server Aus

Enterprise Linux Server Eus

Enterprise Linux Tus

Enterprise Linux Workstation

1 product

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Mit Kerberos 5	Before 1.12.2

Configuration B

19 vulnerable

Vulnerable Software	Affected Versions
Redhat Enterprise Linux Desktop	Version 7.0
Redhat Enterprise Linux Eus	Version 7.3
Redhat Enterprise Linux Eus	Version 7.4
Redhat Enterprise Linux Eus	Version 7.5
Redhat Enterprise Linux Eus	Version 7.6
Redhat Enterprise Linux Eus	Version 7.7
Redhat Enterprise Linux Server	Version 7.0
Redhat Enterprise Linux Server Aus	Version 7.3
Redhat Enterprise Linux Server Aus	Version 7.4
Redhat Enterprise Linux Server Aus	Version 7.6
Redhat Enterprise Linux Server Aus	Version 7.7
Redhat Enterprise Linux Server Eus	Version 7.3
Redhat Enterprise Linux Server Eus	Version 7.4
Redhat Enterprise Linux Server Eus	Version 7.6
Redhat Enterprise Linux Server Eus	Version 7.7
Redhat Enterprise Linux Tus	Version 7.3
Redhat Enterprise Linux Tus	Version 7.6
Redhat Enterprise Linux Tus	Version 7.7
Redhat Enterprise Linux Workstation	Version 7.0

Configuration C

1 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 7.0

Configuration D

1 vulnerable

Vulnerable Software	Affected Versions
Fedoraproject Fedora	Version 20

Related CWEs

Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

References (30)

http://advisories.mageia.org/MGASA-2014-0345.html

Source: cve@mitre.org

Third Party Advisory

http://aix.software.ibm.com/aix/efixes/security/nas_advisory1.asc

Source: cve@mitre.org

Third Party Advisory

http://krbdev.mit.edu/rt/Ticket/Display.html?id=7949

Source: cve@mitre.org

Vendor Advisory

http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136360.html

Source: cve@mitre.org

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2015-0439.html

Source: cve@mitre.org

Third Party Advisory

http://secunia.com/advisories/59102

Source: cve@mitre.org

Third Party Advisory

http://secunia.com/advisories/60082

Source: cve@mitre.org

Third Party Advisory

http://secunia.com/advisories/60448

Source: cve@mitre.org

Third Party Advisory

http://security.gentoo.org/glsa/glsa-201412-53.xml

Source: cve@mitre.org

Third Party Advisory

http://www.debian.org/security/2014/dsa-3000

Source: cve@mitre.org

Third Party Advisory

http://www.mandriva.com/security/advisories?name=MDVSA-2014:165

Source: cve@mitre.org

Third Party Advisory

http://www.securityfocus.com/bid/68909

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

http://www.securitytracker.com/id/1030706

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

https://exchange.xforce.ibmcloud.com/vulnerabilities/94904

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

https://github.com/krb5/krb5/commit/e6ae703ae597d798e310368d52b8f38ee11c6a73

Source: cve@mitre.org

PatchThird Party Advisory

http://advisories.mageia.org/MGASA-2014-0345.html

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://aix.software.ibm.com/aix/efixes/security/nas_advisory1.asc

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://krbdev.mit.edu/rt/Ticket/Display.html?id=7949

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136360.html

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2015-0439.html

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://secunia.com/advisories/59102

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://secunia.com/advisories/60082

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://secunia.com/advisories/60448

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://security.gentoo.org/glsa/glsa-201412-53.xml

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://www.debian.org/security/2014/dsa-3000

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://www.mandriva.com/security/advisories?name=MDVSA-2014:165

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://www.securityfocus.com/bid/68909

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

http://www.securitytracker.com/id/1030706

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

https://exchange.xforce.ibmcloud.com/vulnerabilities/94904

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

https://github.com/krb5/krb5/commit/e6ae703ae597d798e310368d52b8f38ee11c6a73

Source: af854a3a-2127-422b-91ae-364da2661108

PatchThird Party Advisory

Timeline

No history available yet.