CVE-2014-4343

Published: Aug 14, 2014Modified: May 6, 2026

7.6

Vector

AV:N/AC:H/Au:N/C:C/I:C/A:C

Exploitability: 4.9 / Impact: 10.0

Source: NVD

Description

Double free vulnerability in the init_ctx_reselect function in the SPNEGO initiator in lib/gssapi/spnego/spnego_mech.c in MIT Kerberos 5 (aka krb5) 1.10.x through 1.12.x before 1.12.2 allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via network traffic that appears to come from an intended acceptor, but specifies a security mechanism different from the one proposed by the initiator.

Affected (18)

Products: Debian: Debian Linux · Mit: Kerberos 5 · Redhat: Enterprise Linux Desktop, Enterprise Linux Hpc Node, Enterprise Linux Server, Enterprise Linux Workstation

1 product

1 product

4 products

Enterprise Linux Desktop

Enterprise Linux Hpc Node

Enterprise Linux Server

Enterprise Linux Workstation

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 7.0

Configuration B

13 vulnerable

Vulnerable Software	Affected Versions
Mit Kerberos 5	Version 1.10.1
Mit Kerberos 5	Version 1.10.2
Mit Kerberos 5	Version 1.10.3
Mit Kerberos 5	Version 1.10.4
Mit Kerberos 5	Version 1.10
Mit Kerberos 5	Version 1.11.1
Mit Kerberos 5	Version 1.11.2
Mit Kerberos 5	Version 1.11.3
Mit Kerberos 5	Version 1.11.4
Mit Kerberos 5	Version 1.11.5
Mit Kerberos 5	Version 1.11
Mit Kerberos 5	Version 1.12.1
Mit Kerberos 5	Version 1.12

Configuration C

4 vulnerable

Vulnerable Software	Affected Versions
Redhat Enterprise Linux Desktop	Version 7.0
Redhat Enterprise Linux Hpc Node	Version 7.0
Redhat Enterprise Linux Server	Version 7.0
Redhat Enterprise Linux Workstation	Version 7.0

Related CWEs

The product calls free() twice on the same memory address, potentially leading to modification of unexpected memory locations.

References (36)

http://advisories.mageia.org/MGASA-2014-0345.html

Source: cve@mitre.org

http://aix.software.ibm.com/aix/efixes/security/nas_advisory1.asc

Source: cve@mitre.org

http://krbdev.mit.edu/rt/Ticket/Display.html?id=7969

Source: cve@mitre.org

Issue TrackingThird Party Advisory

http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136360.html

Source: cve@mitre.org

http://rhn.redhat.com/errata/RHSA-2015-0439.html

Source: cve@mitre.org

Third Party Advisory

http://secunia.com/advisories/59102

Source: cve@mitre.org

http://secunia.com/advisories/60082

Source: cve@mitre.org

http://secunia.com/advisories/60448

Source: cve@mitre.org

http://secunia.com/advisories/61052

Source: cve@mitre.org

http://security.gentoo.org/glsa/glsa-201412-53.xml

Source: cve@mitre.org

Third Party Advisory

http://support.f5.com/kb/en-us/solutions/public/15000/500/sol15553.html

Source: cve@mitre.org

http://www.debian.org/security/2014/dsa-3000

Source: cve@mitre.org

Third Party Advisory

http://www.osvdb.org/109390

Source: cve@mitre.org

http://www.securityfocus.com/bid/69159

Source: cve@mitre.org

http://www.securitytracker.com/id/1030706

Source: cve@mitre.org

https://bugzilla.redhat.com/show_bug.cgi?id=1121876

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/95211

Source: cve@mitre.org

https://github.com/krb5/krb5/commit/f18ddf5d82de0ab7591a36e465bc24225776940f

Source: cve@mitre.org

Issue TrackingPatchThird Party Advisory

http://advisories.mageia.org/MGASA-2014-0345.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://aix.software.ibm.com/aix/efixes/security/nas_advisory1.asc

Source: af854a3a-2127-422b-91ae-364da2661108

http://krbdev.mit.edu/rt/Ticket/Display.html?id=7969

Source: af854a3a-2127-422b-91ae-364da2661108

Issue TrackingThird Party Advisory

http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136360.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://rhn.redhat.com/errata/RHSA-2015-0439.html

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://secunia.com/advisories/59102

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/60082

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/60448

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/61052

Source: af854a3a-2127-422b-91ae-364da2661108

http://security.gentoo.org/glsa/glsa-201412-53.xml

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://support.f5.com/kb/en-us/solutions/public/15000/500/sol15553.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.debian.org/security/2014/dsa-3000

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://www.osvdb.org/109390

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/69159

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securitytracker.com/id/1030706

Source: af854a3a-2127-422b-91ae-364da2661108

https://bugzilla.redhat.com/show_bug.cgi?id=1121876

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/95211

Source: af854a3a-2127-422b-91ae-364da2661108

https://github.com/krb5/krb5/commit/f18ddf5d82de0ab7591a36e465bc24225776940f

Source: af854a3a-2127-422b-91ae-364da2661108

Issue TrackingPatchThird Party Advisory

Timeline

No history available yet.