CVE-2015-2695

MEDIUM · 5.0 CVSS Gepubliceerd: 09-11-2015 CWE-763

Beschrijving

lib/gssapi/spnego/spnego_mech.c in MIT Kerberos 5 (aka krb5) before 1.14 relies on an inappropriate context handle, which allows remote attackers to cause a denial of service (incorrect pointer read and process crash) via a crafted SPNEGO packet that is mishandled during a gss_inquire_context call.

Vendors

Mit Oracle Canonical Debian Opensuse Suse

Affected products

Kerberos 5 Solaris Ubuntu Linux Debian Linux Leap Opensuse Linux Enterprise Desktop Linux Enterprise Server Linux Enterprise Software Development Kit

References

krbdev.mit.edu
lists.opensuse.org
lists.opensuse.org
lists.opensuse.org
lists.opensuse.org
www.debian.org
www.oracle.com
www.securityfocus.com
www.securitytracker.com
www.ubuntu.com
github.com
security.gentoo.org