CVE-2015-2698
The iakerb_gss_export_sec_context function in lib/gssapi/krb5/iakerb.c in MIT Kerberos 5 (aka...
The iakerb_gss_export_sec_context function in lib/gssapi/krb5/iakerb.c in MIT Kerberos 5 (aka krb5) 1.14 pre-release 2015-09-14 improperly accesses a certain pointer, which allows remote authenticated users to cause a denial of service (memory corruption) or possibly have unspecified other impact by interacting with an application that calls the gss_export_sec_context function. NOTE: this vulnerability exists because of an incorrect fix for CVE-2015-2696.
Exploit likelihood
What each source reports
NVD Score used
The iakerb_gss_export_sec_context function in lib/gssapi/krb5/iakerb.c in MIT Kerberos 5 (aka krb5) 1.14 pre-release 2015-09-14 improperly accesses a certain pointer, which allows remote authenticated users to cause a denial of service (memory corruption) or possibly have unspecified other impact by interacting with an application that calls the gss_export_sec_context function. NOTE: this vulnerability exists because of an incorrect fix for CVE-2015-2696.
- Record
CVE-2015-2698- CVSS 2.0
- 8.5 High
AV:N/AC:M/Au:S/C:C/I:C/A:C - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List No score
The iakerb_gss_export_sec_context function in lib/gssapi/krb5/iakerb.c in MIT Kerberos 5 (aka krb5) 1.14 pre-release 2015-09-14 improperly accesses a certain pointer, which allows remote authenticated users to cause a denial of service (memory corruption) or possibly have unspecified other impact by interacting with an application that calls the gss_export_sec_context function. NOTE: this vulnerability exists because of an incorrect fix for CVE-2015-2696.
- Record
CVE-2015-2698- Updated
- 2026-11-02
EUVDEUVD-2015-2788 No score
The iakerb_gss_export_sec_context function in lib/gssapi/krb5/iakerb.c in MIT Kerberos 5 (aka krb5) 1.14 pre-release 2015-09-14 improperly accesses a certain pointer, which allows remote authenticated users to cause a denial of service (memory corruption) or possibly have unspecified other impact by interacting with an application that calls the gss_export_sec_context function. NOTE: this vulnerability exists because of an incorrect fix for CVE-2015-2696.
- Record
EUVD-2015-2788- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-v6gv-gg54-g3w6 No score
The iakerb_gss_export_sec_context function in lib/gssapi/krb5/iakerb.c in MIT Kerberos 5 (aka...
The iakerb_gss_export_sec_context function in lib/gssapi/krb5/iakerb.c in MIT Kerberos 5 (aka krb5) 1.14 pre-release 2015-09-14 improperly accesses a certain pointer, which allows remote authenticated users to cause a denial of service (memory corruption) or possibly have unspecified other impact by interacting with an application that calls the gss_export_sec_context function. NOTE: this vulnerability exists because of an incorrect fix for CVE-2015-2696.
- Record
GHSA-v6gv-gg54-g3w6- Weakness
- CWE-119
- Updated
- 2026-11-02
OSV No score
The iakerb_gss_export_sec_context function in lib/gssapi/krb5/iakerb.c in MIT Kerberos 5 (aka krb5) 1.14 pre-release 2015-09-14 improperly accesses a certain pointer, which allows remote authenticated users to cause a denial of service (memory corruption) or possibly have unspecified other impact by interacting with an application that calls the gss_export_sec_context function. NOTE: this vulnerability exists because of an incorrect fix for CVE-2015-2696.
- Record
CVE-2015-2698- Updated
- 2026-11-02
OSVDEBIAN-CVE-2015-2698 No score
The iakerb_gss_export_sec_context function in lib/gssapi/krb5/iakerb.c in MIT Kerberos 5 (aka krb5) 1.14 pre-release 2015-09-14 improperly accesses a certain pointer, which allows remote authenticated users to cause a denial of service (memory corruption) or possibly have unspecified other impact by interacting with an application that calls the gss_export_sec_context function. NOTE: this vulnerability exists because of an incorrect fix for CVE-2015-2696.
- Record
DEBIAN-CVE-2015-2698- Updated
- 2026-11-02
Show 5 moreShow less
OSVMGASA-2015-0446 No score
Updated krb5 packages fix CVE-2015-2698
Updated krb5 packages fix security vulnerabilities:
In any MIT krb5 release with the patches for CVE-2015-2696 applied, an application which calls gss_export_sec_context() may experience memory corruption if the context was established using the IAKERB mechanism. Historically, some vulnerabilities of this nature can be translated into remote code execution, though the necessary exploits must be tailored to the individual application and are usually quite complicated (CVE-2015-2698).
- Record
MGASA-2015-0446- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10004-1 No score
krb5-1.15-1.1 on GA media
These are all security issues fixed in the krb5-1.15-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10004-1- Updated
- 2026-11-02
OSVSUSE-SU-2015:2302-1 No score
Security update for krb5
The krb5 package was updated to fix the following security issue:
- CVE-2015-2698: Fixed a memory corruption regression introduced by resolving of CVE-2015-2698 (bsc#954204).
- Record
SUSE-SU-2015:2302-1- Updated
- 2026-11-02
OSVUBUNTU-CVE-2015-2698 No score
The iakerb_gss_export_sec_context function in lib/gssapi/krb5/iakerb.c in MIT Kerberos 5 (aka krb5) 1.14 pre-release 2015-09-14 improperly accesses a certain pointer, which allows remote authenticated users to cause a denial of service (memory corruption) or possibly have unspecified other impact by interacting with an application that calls the gss_export_sec_context function. NOTE: this vulnerability exists because of an incorrect fix for CVE-2015-2696.
- Record
UBUNTU-CVE-2015-2698- Updated
- 2026-11-02
OSVUSN-2810-1 No score
krb5 vulnerabilities
It was discovered that the Kerberos kpasswd service incorrectly handled certain UDP packets. A remote attacker could possibly use this issue to cause resource consumption, resulting in a denial of service. This issue only affected Ubuntu 12.04 LTS. (CVE-2002-2443)
It was discovered that Kerberos incorrectly handled null bytes in certain data fields. A remote attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 12.04 LTS and Ubuntu 14.04 LTS. (CVE-2014-5355)
It was discovered that the Kerberos kdcpreauth modules incorrectly tracked certain client requests. A remote attacker could possibly use this issue to bypass intended preauthentication requirements. This issue only affected Ubuntu 14.04 LTS and Ubuntu 15.04. (CVE-2015-2694)
It was discovered that Kerberos incorrectly handled certain SPNEGO packets. A remote attacker could possibly use this issue to cause a denial of service. (CVE-2015-2695)
It was discovered that Kerberos incorrectly handled certain IAKERB packets. A remote attacker could possibly use this issue to cause a denial of service. (CVE-2015-2696, CVE-2015-2698)
It was discovered that Kerberos incorrectly handled certain TGS requests. A remote attacker could possibly use this issue to cause a denial of service. (CVE-2015-2697)
- Record
USN-2810-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
krb5Debian:12 |
before 1.13.2+dfsg-4 | 1.13.2+dfsg-4 |
krb5Debian:13 |
before 1.13.2+dfsg-4 | 1.13.2+dfsg-4 |
krb5Debian:14 |
before 1.13.2+dfsg-4 | 1.13.2+dfsg-4 |
krb5Mageia:5 |
before 1.12.2-8.2.mga5 | 1.12.2-8.2.mga5 |
krb5SUSE:Linux Enterprise Desktop 12 |
before 1.12.1-22.5 | 1.12.1-22.5 |
krb5SUSE:Linux Enterprise Desktop 12 SP1 |
before 1.12.1-22.5 | 1.12.1-22.5 |
krb5SUSE:Linux Enterprise Software Development Kit 12 |
before 1.12.1-22.5 | 1.12.1-22.5 |
krb5SUSE:Linux Enterprise Software Development Kit 12 SP1 |
before 1.12.1-22.5 | 1.12.1-22.5 |
krb5SUSE:Linux Enterprise Server 12 |
before 1.12.1-22.5 | 1.12.1-22.5 |
krb5SUSE:Linux Enterprise Server for SAP Applications 12 |
before 1.12.1-22.5 | 1.12.1-22.5 |
Show 5 moreShow less
| Package | Affected | Fixed |
|---|---|---|
krb5SUSE:Linux Enterprise Server 12 SP1 |
before 1.12.1-22.5 | 1.12.1-22.5 |
krb5SUSE:Linux Enterprise Server for SAP Applications 12 SP1 |
before 1.12.1-22.5 | 1.12.1-22.5 |
krb5Ubuntu:14.04:LTS |
before 1.12+dfsg-2ubuntu5.2, plus listed versions 1.10.1+dfsg-6.1ubuntu11.11.3+dfsg-3ubuntu21.12+dfsg-2ubuntu11.12+dfsg-2ubuntu21.12+dfsg-2ubuntu3 Show 4 moreShow less1.12+dfsg-2ubuntu41.12+dfsg-2ubuntu4.21.12+dfsg-2ubuntu51.12+dfsg-2ubuntu5.1 |
1.12+dfsg-2ubuntu5.2 |
krb5Ubuntu:14.04:LTS From an advisory covering 7 CVEs |
before 1.12+dfsg-2ubuntu5.2, plus listed versions 1.10.1+dfsg-6.1ubuntu11.11.3+dfsg-3ubuntu21.12+dfsg-2ubuntu11.12+dfsg-2ubuntu21.12+dfsg-2ubuntu3 Show 4 moreShow less1.12+dfsg-2ubuntu41.12+dfsg-2ubuntu4.21.12+dfsg-2ubuntu51.12+dfsg-2ubuntu5.1 |
1.12+dfsg-2ubuntu5.2 |
krb5openSUSE:Tumbleweed From an advisory covering 54 CVEs |
before 1.15-1.1 | 1.15-1.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2015-2698 is a high vulnerability (CVSS 8.5) in Mit Kerberos 5, published November 6, 2015. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.92%, the 87th percentile. Fixed in krb5 1.13.2+dfsg-4.
References
github.com/krb5/krb5/commit/3db8dfec1ef50ddd78d6ba9503185995876a39fd
krbdev.mit.edu/rt/Ticket/Display.html?id=8273
lists.opensuse.org/opensuse-updates/2015-11/msg00116.html
ubuntu.com/usn/USN-2810-1
nvd.nist.gov/vuln/detail/CVE-2015-2698
Show 71 moreShow less
security-tracker.debian.org/tracker/CVE-2015-2698
advisories.mageia.org/MGASA-2015-0446.html
bugs.mageia.org/show_bug.cgi?id=17116
lists.fedoraproject.org/pipermail/package-announce/2015-November/171079.html
suse.com/support/update/announcement/2015/suse-su-20152302-1
bugzilla.suse.com/954204
ubuntu.com/security/CVE-2015-2698
cve.org/CVERecord?id=CVE-2015-2698