Every CVE Search/ Get API key

CVE-2015-2694

The kdcpreauth modules in MIT Kerberos 5 (aka krb5) 1.12.x and 1.13.x before 1.13.2 do not...

5.8 MediumFix available

The kdcpreauth modules in MIT Kerberos 5 (aka krb5) 1.12.x and 1.13.x before 1.13.2 do not properly track whether a client's request has been validated, which allows remote attackers to bypass an intended preauthentication requirement by providing (1) zero bytes of data or (2) an arbitrary realm name, related to plugins/preauth/otp/main.c and plugins/preauth/pkinit/pkinit_srv.c.

Exploit likelihood

2.83%Up 1.6 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 5.8

The kdcpreauth modules in MIT Kerberos 5 (aka krb5) 1.12.x and 1.13.x before 1.13.2 do not properly track whether a client's request has been validated, which allows remote attackers to bypass an intended preauthentication requirement by providing (1) zero bytes of data or (2) an arbitrary realm name, related to plugins/preauth/otp/main.c and plugins/preauth/pkinit/pkinit_srv.c.

Record
CVE-2015-2694
CVSS 2.0
5.8 MediumAV:N/AC:M/Au:N/C:P/I:P/A:N
Weakness
CWE-264
Updated
2026-11-02
CVE List No score

The kdcpreauth modules in MIT Kerberos 5 (aka krb5) 1.12.x and 1.13.x before 1.13.2 do not properly track whether a client's request has been validated, which allows remote attackers to bypass an intended preauthentication requirement by providing (1) zero bytes of data or (2) an arbitrary realm name, related to plugins/preauth/otp/main.c and plugins/preauth/pkinit/pkinit_srv.c.

Record
CVE-2015-2694
Updated
2026-11-02
EUVDEUVD-2015-2784 No score

The kdcpreauth modules in MIT Kerberos 5 (aka krb5) 1.12.x and 1.13.x before 1.13.2 do not properly track whether a client's request has been validated, which allows remote attackers to bypass an intended preauthentication requirement by providing (1) zero bytes of data or (2) an arbitrary realm name, related to plugins/preauth/otp/main.c and plugins/preauth/pkinit/pkinit_srv.c.

Record
EUVD-2015-2784
Updated
2026-11-03
GitHub AdvisoriesGHSA-6h2g-5cjr-jj97 No score

The kdcpreauth modules in MIT Kerberos 5 (aka krb5) 1.12.x and 1.13.x before 1.13.2 do not...

The kdcpreauth modules in MIT Kerberos 5 (aka krb5) 1.12.x and 1.13.x before 1.13.2 do not properly track whether a client's request has been validated, which allows remote attackers to bypass an intended preauthentication requirement by providing (1) zero bytes of data or (2) an arbitrary realm name, related to plugins/preauth/otp/main.c and plugins/preauth/pkinit/pkinit_srv.c.

Record
GHSA-6h2g-5cjr-jj97
Updated
2026-11-02
OSV No score

The kdcpreauth modules in MIT Kerberos 5 (aka krb5) 1.12.x and 1.13.x before 1.13.2 do not properly track whether a client's request has been validated, which allows remote attackers to bypass an intended preauthentication requirement by providing (1) zero bytes of data or (2) an arbitrary realm name, related to plugins/preauth/otp/main.c and plugins/preauth/pkinit/pkinit_srv.c.

Record
CVE-2015-2694
Updated
2026-11-02
OSVDEBIAN-CVE-2015-2694 No score

The kdcpreauth modules in MIT Kerberos 5 (aka krb5) 1.12.x and 1.13.x before 1.13.2 do not properly track whether a client's request has been validated, which allows remote attackers to bypass an intended preauthentication requirement by providing (1) zero bytes of data or (2) an arbitrary realm name, related to plugins/preauth/otp/main.c and plugins/preauth/pkinit/pkinit_srv.c.

Record
DEBIAN-CVE-2015-2694
Updated
2026-11-02
Show 4 moreShow less
OSVopenSUSE-SU-2024:10004-1 No score

krb5-1.15-1.1 on GA media

These are all security issues fixed in the krb5-1.15-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10004-1
Updated
2026-11-02
OSVSUSE-SU-2015:1276-1 No score

Security update for krb5

krb5 was updated to fix four security issues.

These security issues were fixed:

  • CVE-2014-5353: NULL pointer dereference when using a ticket policy name as password name (bsc#910457).
  • CVE-2014-5354: NULL pointer dereference when using keyless entries (bsc#910458).
  • CVE-2014-5355: Denial of service in krb5_read_message (bsc#918595).
  • CVE-2015-2694: OTP and PKINIT kdcpreauth modules leading to requires_preauth bypass (bsc#928978).
Record
SUSE-SU-2015:1276-1
Updated
2026-11-02
OSVUBUNTU-CVE-2015-2694 No score

The kdcpreauth modules in MIT Kerberos 5 (aka krb5) 1.12.x and 1.13.x before 1.13.2 do not properly track whether a client's request has been validated, which allows remote attackers to bypass an intended preauthentication requirement by providing (1) zero bytes of data or (2) an arbitrary realm name, related to plugins/preauth/otp/main.c and plugins/preauth/pkinit/pkinit_srv.c.

Record
UBUNTU-CVE-2015-2694
Updated
2026-11-02
OSVUSN-2810-1 No score

krb5 vulnerabilities

It was discovered that the Kerberos kpasswd service incorrectly handled certain UDP packets. A remote attacker could possibly use this issue to cause resource consumption, resulting in a denial of service. This issue only affected Ubuntu 12.04 LTS. (CVE-2002-2443)

It was discovered that Kerberos incorrectly handled null bytes in certain data fields. A remote attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 12.04 LTS and Ubuntu 14.04 LTS. (CVE-2014-5355)

It was discovered that the Kerberos kdcpreauth modules incorrectly tracked certain client requests. A remote attacker could possibly use this issue to bypass intended preauthentication requirements. This issue only affected Ubuntu 14.04 LTS and Ubuntu 15.04. (CVE-2015-2694)

It was discovered that Kerberos incorrectly handled certain SPNEGO packets. A remote attacker could possibly use this issue to cause a denial of service. (CVE-2015-2695)

It was discovered that Kerberos incorrectly handled certain IAKERB packets. A remote attacker could possibly use this issue to cause a denial of service. (CVE-2015-2696, CVE-2015-2698)

It was discovered that Kerberos incorrectly handled certain TGS requests. A remote attacker could possibly use this issue to cause a denial of service. (CVE-2015-2697)

Record
USN-2810-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
krb5
Debian:12
 before 1.12.1+dfsg-20
1.12.1+dfsg-20
krb5
Debian:13
 before 1.12.1+dfsg-20
1.12.1+dfsg-20
krb5
Debian:14
 before 1.12.1+dfsg-20
1.12.1+dfsg-20
krb5-debuginfo
Red Hat:enterprise_linux:7::client
From an advisory covering 2 CVEs
 before 0:1.13.2-10.el7
0:1.13.2-10.el7
krb5-devel
Red Hat:enterprise_linux:7::client
From an advisory covering 2 CVEs
 before 0:1.13.2-10.el7
0:1.13.2-10.el7
krb5-server
Red Hat:enterprise_linux:7::client
From an advisory covering 2 CVEs
 before 0:1.13.2-10.el7
0:1.13.2-10.el7
krb5-server-ldap
Red Hat:enterprise_linux:7::client
From an advisory covering 2 CVEs
 before 0:1.13.2-10.el7
0:1.13.2-10.el7
krb5
Red Hat:enterprise_linux:7::client
From an advisory covering 2 CVEs
 before 0:1.13.2-10.el7
0:1.13.2-10.el7
krb5-libs
Red Hat:enterprise_linux:7::client
From an advisory covering 2 CVEs
 before 0:1.13.2-10.el7
0:1.13.2-10.el7
krb5-pkinit
Red Hat:enterprise_linux:7::client
From an advisory covering 2 CVEs
 before 0:1.13.2-10.el7
0:1.13.2-10.el7
Show 31 moreShow less
Affected packages
PackageAffectedFixed
krb5-workstation
Red Hat:enterprise_linux:7::client
From an advisory covering 2 CVEs
 before 0:1.13.2-10.el7
0:1.13.2-10.el7
krb5-debuginfo
Red Hat:enterprise_linux:7::computenode
From an advisory covering 2 CVEs
 before 0:1.13.2-10.el7
0:1.13.2-10.el7
krb5-devel
Red Hat:enterprise_linux:7::computenode
From an advisory covering 2 CVEs
 before 0:1.13.2-10.el7
0:1.13.2-10.el7
krb5-server
Red Hat:enterprise_linux:7::computenode
From an advisory covering 2 CVEs
 before 0:1.13.2-10.el7
0:1.13.2-10.el7
krb5-server-ldap
Red Hat:enterprise_linux:7::computenode
From an advisory covering 2 CVEs
 before 0:1.13.2-10.el7
0:1.13.2-10.el7
krb5
Red Hat:enterprise_linux:7::computenode
From an advisory covering 2 CVEs
 before 0:1.13.2-10.el7
0:1.13.2-10.el7
krb5-libs
Red Hat:enterprise_linux:7::computenode
From an advisory covering 2 CVEs
 before 0:1.13.2-10.el7
0:1.13.2-10.el7
krb5-pkinit
Red Hat:enterprise_linux:7::computenode
From an advisory covering 2 CVEs
 before 0:1.13.2-10.el7
0:1.13.2-10.el7
krb5-workstation
Red Hat:enterprise_linux:7::computenode
From an advisory covering 2 CVEs
 before 0:1.13.2-10.el7
0:1.13.2-10.el7
krb5
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
 before 0:1.13.2-10.el7
0:1.13.2-10.el7
krb5-debuginfo
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
 before 0:1.13.2-10.el7
0:1.13.2-10.el7
krb5-devel
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
 before 0:1.13.2-10.el7
0:1.13.2-10.el7
krb5-libs
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
 before 0:1.13.2-10.el7
0:1.13.2-10.el7
krb5-pkinit
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
 before 0:1.13.2-10.el7
0:1.13.2-10.el7
krb5-server
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
 before 0:1.13.2-10.el7
0:1.13.2-10.el7
krb5-server-ldap
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
 before 0:1.13.2-10.el7
0:1.13.2-10.el7
krb5-workstation
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
 before 0:1.13.2-10.el7
0:1.13.2-10.el7
krb5
Red Hat:enterprise_linux:7::workstation
From an advisory covering 2 CVEs
 before 0:1.13.2-10.el7
0:1.13.2-10.el7
krb5-debuginfo
Red Hat:enterprise_linux:7::workstation
From an advisory covering 2 CVEs
 before 0:1.13.2-10.el7
0:1.13.2-10.el7
krb5-devel
Red Hat:enterprise_linux:7::workstation
From an advisory covering 2 CVEs
 before 0:1.13.2-10.el7
0:1.13.2-10.el7
krb5-libs
Red Hat:enterprise_linux:7::workstation
From an advisory covering 2 CVEs
 before 0:1.13.2-10.el7
0:1.13.2-10.el7
krb5-pkinit
Red Hat:enterprise_linux:7::workstation
From an advisory covering 2 CVEs
 before 0:1.13.2-10.el7
0:1.13.2-10.el7
krb5-server
Red Hat:enterprise_linux:7::workstation
From an advisory covering 2 CVEs
 before 0:1.13.2-10.el7
0:1.13.2-10.el7
krb5-server-ldap
Red Hat:enterprise_linux:7::workstation
From an advisory covering 2 CVEs
 before 0:1.13.2-10.el7
0:1.13.2-10.el7
krb5-workstation
Red Hat:enterprise_linux:7::workstation
From an advisory covering 2 CVEs
 before 0:1.13.2-10.el7
0:1.13.2-10.el7
krb5
SUSE:Linux Enterprise Software Development Kit 12
From an advisory covering 4 CVEs
 before 1.12.1-16.1
1.12.1-16.1
krb5
SUSE:Linux Enterprise Server 12
From an advisory covering 4 CVEs
 before 1.12.1-16.1
1.12.1-16.1
krb5
SUSE:Linux Enterprise Server for SAP Applications 12
From an advisory covering 4 CVEs
 before 1.12.1-16.1
1.12.1-16.1
krb5
Ubuntu:14.04:LTS
 before 1.12+dfsg-2ubuntu5.2, plus listed versions
1.10.1+dfsg-6.1ubuntu11.11.3+dfsg-3ubuntu21.12+dfsg-2ubuntu11.12+dfsg-2ubuntu21.12+dfsg-2ubuntu3
Show 4 moreShow less
1.12+dfsg-2ubuntu41.12+dfsg-2ubuntu4.21.12+dfsg-2ubuntu51.12+dfsg-2ubuntu5.1
1.12+dfsg-2ubuntu5.2
krb5
Ubuntu:14.04:LTS
From an advisory covering 7 CVEs
 before 1.12+dfsg-2ubuntu5.2, plus listed versions
1.10.1+dfsg-6.1ubuntu11.11.3+dfsg-3ubuntu21.12+dfsg-2ubuntu11.12+dfsg-2ubuntu21.12+dfsg-2ubuntu3
Show 4 moreShow less
1.12+dfsg-2ubuntu41.12+dfsg-2ubuntu4.21.12+dfsg-2ubuntu51.12+dfsg-2ubuntu5.1
1.12+dfsg-2ubuntu5.2
krb5
openSUSE:Tumbleweed
From an advisory covering 54 CVEs
 before 1.15-1.1
1.15-1.1

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2015-2694 is a medium vulnerability (CVSS 5.8) in Mit Kerberos 5, published May 25, 2015. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.83%, the 86th percentile. Fixed in krb5 1.12.1+dfsg-20.

References

Show 91 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open