Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Loading...
Explore Latest Linux Security advisories
We found -7 articles for you...
198
security advisorydenial of servicemedium severityArch Linux: 201507-11 Medium: lib32-krb5 Denial Of Service Issues
The package lib32-krb5 before version 1.13.2-2 is vulnerable to multiple issues including denial of service and preauthentication requirement bypass. . Arch Linux Security Advisory ASA-201507-11 ========================================= Severity: Medium Date : 2015-07-12 CVE-ID : CVE-2014-5355 CVE-2015-2694 Package : lib32-krb5 Type : multiple issues Remote : Yes Link : https://wiki.archlinux.org/title/CVE Summary ====== The package lib32-krb5 before version 1.13.2-2 is vulnerable to multiple issues including denial of service and preauthentication requirement bypass. Resolution ========= Upgrade to 1.13.2-2. # pacman -Syu "lib32-krb5> =1.13.2-2" The problems have been fixed upstream in version 1.13.2. Workaround ========= None. Description ========== - CVE-2014-5355 (denial of service) When a server process uses the krb5_recvauth function, an unauthenticated remote attacker can cause a NULL dereference by sending a zero-byte version string, or a read beyond the end of allocated storage by sending a non-null-terminated version string. The example user-to-user server application (uuserver) is similarly vulnerable to a zero-length or non-null-terminated principal name string. The krb5_recvauth function reads two version strings from the client using krb5_read_message(), which produces a krb5_data structure containing a length and a pointer to an octet sequence. krb5_recvaut assumes that the data pointer is a valid C string and passes it to strcmp() to verify the versions. If the client sends an empty octet sequence, the data pointer will be NULL and strcmp() will dereference a NULL pointer, causing the process to crash. If the client sends a non-null-terminated octet sequence, strcmp() will read beyond the end of the allocated storage, possibly causing the process to crash. - CVE-2015-2694 (preauthentication requirement bypass) It has been discovered that, when the KDC is configured with PKINIT support, an unauthenticated remote attackercan bypass the requires_preauth flag on a client principal and obtain a ciphertext encrypted in the principal's long-term key. This ciphertext could be used to conduct an off-line dictionary attack against the user's password. Impact ===== A remote attacker is able to send specially crafted packets to perform a denial of service attack or bypass the requires_preauth flag and obtain ciphertext that could be used to conduct an off-line dictionary attack against the user's password. References ========= https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-5355 https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-2694 https://bugs.archlinux.org/task/45575 . Gentoo Linux notice emphasizes vulnerabilities in lib32-libxml2, notably concerning remote code execution and XML entity expansion exploits.. Arch Linux, lib32-krb5, denial of service, preauthentication bypass, security advisory. . Severity: Medium. LinuxSecurity.com Team
Jul 12, 2015
•Medium
ArchLinux
198
security advisorydenial of servicecritical threatArch Linux: ASA-201507-10 Critical: krb5 Denial Of Service & Bypass
The package krb5 before version 1.13.2-1 is vulnerable to multiple issues including denial of service and preauthentication requirement bypass. . Arch Linux Security Advisory ASA-201507-10 ========================================= Severity: Medium Date : 2015-07-12 CVE-ID : CVE-2014-5355 CVE-2015-2694 Package : krb5 Type : multiple issues Remote : Yes Link : https://wiki.archlinux.org/title/CVE Summary ====== The package krb5 before version 1.13.2-1 is vulnerable to multiple issues including denial of service and preauthentication requirement bypass. Resolution ========= Upgrade to 1.13.2-1. # pacman -Syu "krb5> =1.13.2-1" The problems have been fixed upstream in version 1.13.2. Workaround ========= None. Description ========== - CVE-2014-5355 (denial of service) When a server process uses the krb5_recvauth function, an unauthenticated remote attacker can cause a NULL dereference by sending a zero-byte version string, or a read beyond the end of allocated storage by sending a non-null-terminated version string. The example user-to-user server application (uuserver) is similarly vulnerable to a zero-length or non-null-terminated principal name string. The krb5_recvauth function reads two version strings from the client using krb5_read_message(), which produces a krb5_data structure containing a length and a pointer to an octet sequence. krb5_recvaut assumes that the data pointer is a valid C string and passes it to strcmp() to verify the versions. If the client sends an empty octet sequence, the data pointer will be NULL and strcmp() will dereference a NULL pointer, causing the process to crash. If the client sends a non-null-terminated octet sequence, strcmp() will read beyond the end of the allocated storage, possibly causing the process to crash. - CVE-2015-2694 (preauthentication requirement bypass) It has been discovered that, when the KDC is configured with PKINIT support, an unauthenticated remote attacker can bypassthe requires_preauth flag on a client principal and obtain a ciphertext encrypted in the principal's long-term key. This ciphertext could be used to conduct an off-line dictionary attack against the user's password. Impact ===== A remote attacker is able to send specially crafted packets to perform a denial of service attack or bypass the requires_preauth flag and obtain ciphertext that could be used to conduct an off-line dictionary attack against the user's password. References ========= https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-5355 https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-2694 https://bugs.archlinux.org/task/45575 . Arch Linux Security Announcement ASA-202309-15 releases updates for openssl addressing vulnerabilities related to remote code execution and authentication flaws.. Arch Linux, krb5 Update, Denial of Service Threat, Preauthentication Bypass. . Severity: Medium. LinuxSecurity.com Team
Jul 12, 2015
•Medium
ArchLinux
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!