Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 523
Alerts This Week
Warning Icon 1 523

Debian: DSA-3153-1 Critical: Multiple krb5 Denial Of Service Issues

debian
Calendar Grey February 3, 2015
Scroller Debian
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ----------------------------------------------------
Multiples vulnerabilities have been found in krb5, the MIT implementation of Kerberos: CVE-2014-5352
Topics%20covered

Topics Covered

security advisory denial of service code execution debian krb5

Summary

Multiples vulnerabilities have been found in krb5, the MIT
implementation of Kerberos:

CVE-2014-5352

Incorrect memory management in the libgssapi_krb5 library might
result in denial of service or the execution of arbitrary code.

CVE-2014-9421

Incorrect memory management in kadmind's processing of XDR data
might result in denial of service or the execution of arbitrary code.

CVE-2014-9422

Incorrect processing of two-component server principals might result
in impersonation attacks.

CVE-2014-9423

An information leak in the libgssrpc library.

For the stable distribution (wheezy), these problems have been fixed in
version 1.10.1+dfsg-5+deb7u3.

For the unstable distribution (sid), these problems have been fixed in
version 1.12.1+dfsg-17.

We recommend that you upgrade your krb5 packages.

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/



Severity
critical
Lowest
Low
Medium
High
Critical

Package: krb5
CVE ID: CVE-2014-5352 CVE-2014-9421 CVE-2014-9422 CVE-2014-9423

Topics%20covered

Topics Covered

security advisory denial of service code execution debian krb5

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.