CVE-2007-2443

Description

Integer signedness error in the gssrpc__svcauth_unix function in svc_auth_unix.c in the RPC library in MIT Kerberos 5 (krb5) 1.6.1 and earlier might allow remote attackers to execute arbitrary code via a negative length value.

8.3

CVSS

Severity: High

CVSS 2.0 •

EPSS 25.36% Top 5%

Vendor Advisory ubuntu.com Vendor Advisory redhat.com Vendor Advisory apple.com Vendor Advisory gentoo.org Vendor Advisory hp.com Vendor Advisory debian.org Vendor Advisory trustix.org Vendor Advisory novell.com Vendor Advisory mandriva.com Vendor Advisory redhat.com Vendor Advisory sgi.com Vendor Advisory mit.edu Vendor Advisory mit.edu

Affected: n/a n/a

References

Link	Tags
http://lists.grok.org.uk/pipermail/full-disclosure/2007-September/065902.html	third party advisory mailing list
http://www.vupen.com/english/advisories/2007/2732	third party advisory vdb entry
http://secunia.com/advisories/25894	third party advisory
http://secunia.com/advisories/25801	third party advisory
http://www.ubuntu.com/usn/usn-477-1	third party advisory vendor advisory
http://www.vupen.com/english/advisories/2007/3229	third party advisory vdb entry
http://www.securityfocus.com/archive/1/472507/30/5970/threaded	mailing list third party advisory vdb entry
http://secunia.com/advisories/25911	third party advisory
http://secunia.com/advisories/25888	third party advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11277	broken link signature third party advisory vdb entry
http://www.redhat.com/support/errata/RHSA-2007-0384.html	third party advisory vendor advisory
https://secure-support.novell.com/KanisaPlatform/Publishing/773/3248163_f.SAL_Public.html	broken link
http://secunia.com/advisories/25890	third party advisory
http://www.vupen.com/english/advisories/2007/2337	third party advisory vdb entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/35085	third party advisory vdb entry
http://lists.apple.com/archives/security-announce//2007/Jul/msg00004.html	vendor advisory mailing list third party advisory
http://www.vupen.com/english/advisories/2007/2491	third party advisory vdb entry
http://secunia.com/advisories/26228	third party advisory
http://www.vupen.com/english/advisories/2010/1574	third party advisory vdb entry
http://secunia.com/advisories/26033	third party advisory
http://security.gentoo.org/glsa/glsa-200707-11.xml	third party advisory vendor advisory
http://secunia.com/advisories/25800	third party advisory
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02257427	vendor advisory broken link
http://www.securityfocus.com/bid/24657	third party advisory vdb entry
http://www.securitytracker.com/id?1018293	third party advisory vdb entry
http://www.kb.cert.org/vuls/id/365313	patch third party advisory us government resource
http://www.debian.org/security/2007/dsa-1323	third party advisory vendor advisory
http://www.trustix.org/errata/2007/0021/	vendor advisory broken link
http://web.mit.edu/kerberos/www/advisories/MITKRB5-SA-2007-004.txt	patch vendor advisory
http://www.us-cert.gov/cas/techalerts/TA07-177A.html	patch third party advisory us government resource
http://www.novell.com/linux/security/advisories/2007_38_krb5.html	vendor advisory broken link
http://secunia.com/advisories/25870	third party advisory
http://www.mandriva.com/security/advisories?name=MDKSA-2007:137	third party advisory vendor advisory
http://secunia.com/advisories/26909	third party advisory
https://issues.rpath.com/browse/RPL-1499	broken link
http://secunia.com/advisories/27706	third party advisory
http://docs.info.apple.com/article.html?artnum=306172	broken link
http://www.redhat.com/support/errata/RHSA-2007-0562.html	third party advisory vendor advisory
http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2007-004.txt	patch vendor advisory
http://www.securityfocus.com/archive/1/472432/100/0/threaded	mailing list third party advisory vdb entry
http://www.securityfocus.com/bid/25159	third party advisory vdb entry
http://osvdb.org/36597	vdb entry broken link
http://www.securityfocus.com/archive/1/472288/100/0/threaded	mailing list third party advisory vdb entry
http://secunia.com/advisories/25814	third party advisory
http://secunia.com/advisories/25821	third party advisory
ftp://patches.sgi.com/support/free/security/advisories/20070602-01-P.asc	vendor advisory broken link
http://secunia.com/advisories/40346	third party advisory
http://secunia.com/advisories/26235	third party advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7131	broken link signature third party advisory vdb entry

Frequently Asked Questions

What is the severity of CVE-2007-2443?: CVE-2007-2443 has been scored as a high severity vulnerability.
How to fix CVE-2007-2443?: To fix CVE-2007-2443, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2007-2443 being actively exploited in the wild?: It is possible that CVE-2007-2443 is being exploited or will be exploited in a near future based on public information. According to its EPSS score, there is a ~25% probability that this vulnerability will be exploited by malicious actors in the next 30 days.