CVE-2014-4342

MEDIUM · 5.0 CVSS Gepubliceerd: 20-07-2014 CWE-119

Beschrijving

MIT Kerberos 5 (aka krb5) 1.7.x through 1.12.x before 1.12.2 allows remote attackers to cause a denial of service (buffer over-read or NULL pointer dereference, and application crash) by injecting invalid tokens into a GSSAPI application session.

Vendors

Debian Mit Redhat

Affected products

Debian Linux Kerberos Kerberos 5 Enterprise Linux Desktop Enterprise Linux Hpc Node Enterprise Linux Server Enterprise Linux Workstation

References

advisories.mageia.org
krbdev.mit.edu
rhn.redhat.com
secunia.com
secunia.com
www.debian.org
www.mandriva.com
www.oracle.com
www.securityfocus.com
www.securitytracker.com
exchange.xforce.ibmcloud.com
github.com