CVE-2014-5352

Description

The krb5_gss_process_context_token function in lib/gssapi/krb5/process_context_token.c in the libgssapi_krb5 library in MIT Kerberos 5 (aka krb5) through 1.11.5, 1.12.x through 1.12.2, and 1.13.x before 1.13.1 does not properly maintain security-context handles, which allows remote authenticated users to cause a denial of service (use-after-free and double free, and daemon crash) or possibly execute arbitrary code via crafted GSSAPI traffic, as demonstrated by traffic to kadmind.

9.0

CVSS

Severity: Critical

CVSS 2.0 •

EPSS 3.92% Top 15%

Vendor Advisory fedoraproject.org Vendor Advisory redhat.com Vendor Advisory fedoraproject.org Vendor Advisory debian.org Vendor Advisory opensuse.org Vendor Advisory redhat.com Vendor Advisory opensuse.org Vendor Advisory mandriva.com Vendor Advisory ubuntu.com Vendor Advisory opensuse.org Vendor Advisory github.com

Affected: n/a n/a

References

Link	Tags
http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151437.html	vendor advisory
http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2015-001.txt
http://rhn.redhat.com/errata/RHSA-2015-0794.html	vendor advisory
http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151103.html	vendor advisory
http://www.debian.org/security/2015/dsa-3153	vendor advisory
http://lists.opensuse.org/opensuse-updates/2015-02/msg00044.html	vendor advisory
http://rhn.redhat.com/errata/RHSA-2015-0439.html	vendor advisory
http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00016.html	vendor advisory
http://www.mandriva.com/security/advisories?name=MDVSA-2015:069	vendor advisory
http://www.ubuntu.com/usn/USN-2498-1	vendor advisory
http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00011.html	vendor advisory
http://www.securityfocus.com/bid/72495	vdb entry
https://github.com/krb5/krb5/commit/82dc33da50338ac84c7b4102dc6513d897d0506a	vendor advisory
http://web.mit.edu/kerberos/advisories/2015-001-patch-r113.txt

Frequently Asked Questions

What is the severity of CVE-2014-5352?: CVE-2014-5352 has been scored as a critical severity vulnerability.
How to fix CVE-2014-5352?: To fix CVE-2014-5352, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2014-5352 being actively exploited in the wild?: It is possible that CVE-2014-5352 is being exploited or will be exploited in a near future based on public information. According to its EPSS score, there is a ~4% probability that this vulnerability will be exploited by malicious actors in the next 30 days.