{"id":"CVE-2014-9423","aliases":["DEBIAN-CVE-2014-9423","DLA-146-1","DSA-3153-1","EUVD-2014-9244","GHSA-c8r5-76c4-8w9w","MGASA-2015-0066","RHSA-2015:0439","SUSE-SU-2015:0257-1","SUSE-SU-2015:0290-1","SUSE-SU-2015:0290-2","UBUNTU-CVE-2014-9423","USN-2498-1","openSUSE-SU-2024:10004-1"],"status":"published","title":"The svcauth_gss_accept_sec_context function in lib/rpc/svc_auth_gss.c in MIT Kerberos 5 (aka krb5...","description":"The svcauth_gss_accept_sec_context function in lib/rpc/svc_auth_gss.c in MIT Kerberos 5 (aka krb5) 1.11.x through 1.11.5, 1.12.x through 1.12.2, and 1.13.x before 1.13.1 transmits uninitialized interposer data to clients, which allows remote attackers to obtain sensitive information from process heap memory by sniffing the network for data in a handle field.","severity":{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.0389,"percentile":0.90316,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-200"],"published":"2015-01-21T10:07:55Z","modified":"2026-10-23T15:47:28Z","fixes":[{"ecosystem":"Debian:12","package":"krb5","fixed_in":["1.12.1+dfsg-17"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"krb5","fixed_in":["1.12.1+dfsg-17"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"krb5","fixed_in":["1.12.1+dfsg-17"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"krb5","fixed_in":["1.12+dfsg-2ubuntu5.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.1+dfsg-17"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.1+dfsg-17"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.1+dfsg-17"}]}]},{"source":"osv","ecosystem":"Debian:6.0","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.3+dfsg-4squeeze9"}]}],"versions":["1.8.3+dfsg-4","1.8.3+dfsg-4squeeze1","1.8.3+dfsg-4squeeze2","1.8.3+dfsg-4squeeze5","1.8.3+dfsg-4squeeze6","1.8.3+dfsg-4squeeze7","1.8.3+dfsg-4squeeze8"],"bundled":4},{"source":"osv","ecosystem":"Debian:7","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.1+dfsg-5+deb7u3"}]}],"versions":["1.10.1+dfsg-5","1.10.1+dfsg-5+deb7u1","1.10.1+dfsg-5+deb7u2"],"bundled":4},{"source":"osv","ecosystem":"Mageia:4","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.11.4-1.4.mga4"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"krb5-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.12.2-14.el7"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"krb5-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.12.2-14.el7"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"krb5-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.12.2-14.el7"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"krb5-server-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.12.2-14.el7"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.12.2-14.el7"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"krb5-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.12.2-14.el7"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"krb5-pkinit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.12.2-14.el7"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"krb5-workstation","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.12.2-14.el7"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"krb5-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.12.2-14.el7"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"krb5-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.12.2-14.el7"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"krb5-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.12.2-14.el7"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"krb5-server-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.12.2-14.el7"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.12.2-14.el7"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"krb5-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.12.2-14.el7"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"krb5-pkinit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.12.2-14.el7"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"krb5-workstation","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.12.2-14.el7"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.12.2-14.el7"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"krb5-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.12.2-14.el7"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"krb5-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.12.2-14.el7"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"krb5-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.12.2-14.el7"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"krb5-pkinit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.12.2-14.el7"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"krb5-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.12.2-14.el7"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"krb5-server-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.12.2-14.el7"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"krb5-workstation","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.12.2-14.el7"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.12.2-14.el7"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"krb5-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.12.2-14.el7"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"krb5-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.12.2-14.el7"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"krb5-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.12.2-14.el7"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"krb5-pkinit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.12.2-14.el7"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"krb5-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.12.2-14.el7"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"krb5-server-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.12.2-14.el7"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"krb5-workstation","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.12.2-14.el7"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.1-9.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.1-9.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.1-9.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.1-9.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.1-9.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.1-9.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.1-9.1"}]}],"bundled":5},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12+dfsg-2ubuntu5.1"}]}],"versions":["1.10.1+dfsg-6.1ubuntu1","1.11.3+dfsg-3ubuntu2","1.12+dfsg-2ubuntu1","1.12+dfsg-2ubuntu2","1.12+dfsg-2ubuntu3","1.12+dfsg-2ubuntu4","1.12+dfsg-2ubuntu4.2","1.12+dfsg-2ubuntu5"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12+dfsg-2ubuntu5.1"}]}],"versions":["1.10.1+dfsg-6.1ubuntu1","1.11.3+dfsg-3ubuntu2","1.12+dfsg-2ubuntu1","1.12+dfsg-2ubuntu2","1.12+dfsg-2ubuntu3","1.12+dfsg-2ubuntu4","1.12+dfsg-2ubuntu4.2","1.12+dfsg-2ubuntu5"],"bundled":7},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15-1.1"}]}],"bundled":54}],"products":[{"vendor":"mit","product":"kerberos_5"}],"references":[{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151437.html","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2015-001.txt","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory","advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151103.html","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"http://www.debian.org/security/2015/dsa-3153","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2015-02/msg00044.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","web"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0439.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00016.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","web"]},{"url":"https://github.com/krb5/krb5/commit/5bb8a6b9c9eb8dd22bc9526751610aaa255ead9c","tags":["x_refsource_CONFIRM","x_transferred","fix"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2015:069","tags":["vendor-advisory","x_refsource_MANDRIVA","x_transferred","advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2498-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00011.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","web"]},{"url":"http://www.securityfocus.com/bid/72503","tags":["vdb-entry","x_refsource_BID","x_transferred","web"]},{"url":"http://web.mit.edu/kerberos/advisories/2015-001-patch-r113.txt","tags":["x_refsource_CONFIRM","x_transferred","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-9423","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-c8r5-76c4-8w9w"},{"url":"https://security-tracker.debian.org/tracker/CVE-2014-9423","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2015-0066.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=15202","tags":["report"]},{"url":"http://web.mit.edu/Kerberos/advisories/MITKRB5-SA-2015-001.txt","tags":["advisory","article","report"]},{"url":"https://www.debian.org/security/2015/dsa-3153","tags":["web"]},{"url":"https://access.redhat.com/errata/RHSA-2015:0439","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1084068","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1102837","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1109102","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1109919","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1116180","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1118347","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1120581","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1121789","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1121876","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1121877","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1127995","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1128157","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1166012","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1174543","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1179856","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1179857","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1179861","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1179863","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1184629","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_0439.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-4341","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-4341","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-4341","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-4342","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-4342","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-4342","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-4343","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-4343","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-4343","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-4344","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-4344","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-4344","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-4345","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-4345","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-4345","tags":["advisory"]},{"url":"http://web.mit.edu/Kerberos/advisories/MITKRB5-SA-2014-001.txt","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-5352","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-5352","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-5352","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-5353","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-5353","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-5353","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-9421","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-9421","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-9421","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-9422","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-9422","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-9422","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-9423","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-9423","tags":["advisory","report"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20150257-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/872912","tags":["report"]},{"url":"https://bugzilla.suse.com/906557","tags":["report"]},{"url":"https://bugzilla.suse.com/912002","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2014-5352","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-9421","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-9422","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-9423","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20150290-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/897874","tags":["report"]},{"url":"https://bugzilla.suse.com/898439","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2014-5351","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20150290-2/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2014-9423","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-2498-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2014-5351","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2014-5352","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2014-5353","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2014-5354","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2014-9421","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2014-9422","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2002-2443","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-0844","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-0845","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-0846","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-0847","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-3295","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-4212","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-0283","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-0628","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-1320","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-1321","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-1322","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-1323","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-1324","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-4020","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-4021","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-4022","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-0281","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-0282","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-0284","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-0285","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-1527","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-1528","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-1529","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-1530","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-1012","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-1013","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-1016","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1415","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1417","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1418","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4341","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4342","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4343","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4344","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4345","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-5353","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-5354","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-5355","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2694","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2695","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2696","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2697","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2698","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8629","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8630","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8631","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-3119","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-3120","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2014-9423","description":"The svcauth_gss_accept_sec_context function in lib/rpc/svc_auth_gss.c in MIT Kerberos 5 (aka krb5) 1.11.x through 1.11.5, 1.12.x through 1.12.2, and 1.13.x before 1.13.1 transmits uninitialized interposer data to clients, which allows remote attackers to obtain sensitive information from process heap memory by sniffing the network for data in a handle field.","status":"published","published":"2015-02-19T11:00:00Z","modified":"2024-08-06T13:47:41.334Z","updated_at":"2026-11-02T14:33:42.54191Z"}],"euvd":[{"id":"EUVD-2014-9244","description":"The svcauth_gss_accept_sec_context function in lib/rpc/svc_auth_gss.c in MIT Kerberos 5 (aka krb5) 1.11.x through 1.11.5, 1.12.x through 1.12.2, and 1.13.x before 1.13.1 transmits uninitialized interposer data to clients, which allows remote attackers to obtain sensitive information from process heap memory by sniffing the network for data in a handle field.","status":"published","published":"2015-02-19T11:00:00Z","modified":"2024-08-06T13:47:41Z","updated_at":"2026-11-03T01:56:48.88782Z"}],"ghsa":[{"id":"GHSA-c8r5-76c4-8w9w","title":"The svcauth_gss_accept_sec_context function in lib/rpc/svc_auth_gss.c in MIT Kerberos 5 (aka krb5...","description":"The svcauth_gss_accept_sec_context function in lib/rpc/svc_auth_gss.c in MIT Kerberos 5 (aka krb5) 1.11.x through 1.11.5, 1.12.x through 1.12.2, and 1.13.x before 1.13.1 transmits uninitialized interposer data to clients, which allows remote attackers to obtain sensitive information from process heap memory by sniffing the network for data in a handle field.","status":"published","published":"2022-05-13T01:28:49Z","modified":"2023-02-01T05:08:03Z","cwes":["CWE-200"],"updated_at":"2026-11-02T14:50:40.02829Z"}],"nvd":[{"id":"CVE-2014-9423","description":"The svcauth_gss_accept_sec_context function in lib/rpc/svc_auth_gss.c in MIT Kerberos 5 (aka krb5) 1.11.x through 1.11.5, 1.12.x through 1.12.2, and 1.13.x before 1.13.1 transmits uninitialized interposer data to clients, which allows remote attackers to obtain sensitive information from process heap memory by sniffing the network for data in a handle field.","status":"published","published":"2015-02-19T11:59:07.5Z","modified":"2026-06-17T00:18:20.297Z","cvss":[{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:02:58.385843Z"}],"osv":[{"id":"CVE-2014-9423","description":"The svcauth_gss_accept_sec_context function in lib/rpc/svc_auth_gss.c in MIT Kerberos 5 (aka krb5) 1.11.x through 1.11.5, 1.12.x through 1.12.2, and 1.13.x before 1.13.1 transmits uninitialized interposer data to clients, which allows remote attackers to obtain sensitive information from process heap memory by sniffing the network for data in a handle field.","status":"published","published":"2015-02-19T11:59:07Z","modified":"2026-04-16T06:17:25.95202488Z","updated_at":"2026-11-02T15:44:00.097545Z"},{"id":"DEBIAN-CVE-2014-9423","description":"The svcauth_gss_accept_sec_context function in lib/rpc/svc_auth_gss.c in MIT Kerberos 5 (aka krb5) 1.11.x through 1.11.5, 1.12.x through 1.12.2, and 1.13.x before 1.13.1 transmits uninitialized interposer data to clients, which allows remote attackers to obtain sensitive information from process heap memory by sniffing the network for data in a handle field.","status":"published","published":"2015-02-19T11:59:07.5Z","modified":"2026-10-23T15:47:28.723267997Z","updated_at":"2026-11-02T15:45:26.442161Z"},{"id":"DLA-146-1","title":"krb5 - security update","status":"published","published":"2015-02-06T00:00:00Z","modified":"2026-03-09T01:21:47.367608Z","updated_at":"2026-11-02T15:46:09.777694Z"},{"id":"DSA-3153-1","title":"krb5 - security update","status":"published","published":"2015-02-03T00:00:00Z","modified":"2026-03-09T01:22:45.10424Z","updated_at":"2026-11-02T15:46:15.843838Z"},{"id":"MGASA-2015-0066","title":"Updated krb5 packages fix security vulnerabilities","description":"Updated krb5 packages fix security vulnerabilities:\n\nIncorrect memory management in the libgssapi_krb5 library might result in\ndenial of service or the execution of arbitrary code (CVE-2014-5352).\n\nIncorrect memory management in kadmind's processing of XDR data might result\nin denial of service or the execution of arbitrary code (CVE-2014-9421).\n\nIncorrect processing of two-component server principals might result in\nimpersonation attacks (CVE-2014-9422).\n\nAn information leak in the libgssrpc library (CVE-2014-9423).\n","status":"published","published":"2015-02-15T15:57:20Z","modified":"2026-04-16T06:23:57.533704852Z","updated_at":"2026-11-02T15:49:39.488462Z"},{"id":"openSUSE-SU-2024:10004-1","title":"krb5-1.15-1.1 on GA media","description":"These are all security issues fixed in the krb5-1.15-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:18:07.629761Z","updated_at":"2026-11-02T16:58:33.135986Z"},{"id":"RHSA-2015:0439","title":"Red Hat Security Advisory: krb5 security, bug fix and enhancement update","status":"published","published":"2024-09-15T21:59:24Z","modified":"2026-08-05T10:03:09Z","updated_at":"2026-11-02T15:53:02.532052Z"},{"id":"SUSE-SU-2015:0257-1","title":"Security update for krb5","description":"\nkrb5 has been updated to fix four security issues:\n\n    * CVE-2014-5352: gss_process_context_token() incorrectly frees context\n      (bsc#912002)\n    * CVE-2014-9421: kadmind doubly frees partial deserialization results\n      (bsc#912002)\n    * CVE-2014-9422: kadmind incorrectly validates server principal name\n      (bsc#912002)\n    * CVE-2014-9423: libgssrpc server applications leak uninitialized bytes\n      (bsc#912002)\n\nAdditionally, these non-security issues have been fixed:\n\n    * Winbind process hangs indefinitely without DC. (bsc#872912)\n    * Hanging winbind processes. (bsc#906557)\n\nSecurity Issues:\n\n    * CVE-2014-5352\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5352\u003e\n    * CVE-2014-9421\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9421\u003e\n    * CVE-2014-9422\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9422\u003e\n    * CVE-2014-9423\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9423\u003e\n\n","status":"published","published":"2015-02-06T09:35:09Z","modified":"2026-02-04T02:58:41.897361Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"SUSE-SU-2015:0290-1","title":"Security update for krb5","description":"\nMIT kerberos krb5 was updated to fix several security issues and bugs.\n\nSecurity issues fixed:\nCVE-2014-5351: The kadm5_randkey_principal_3 function in\nlib/kadm5/srv/svr_principal.c in kadmind in MIT Kerberos 5 (aka krb5)\nsent old keys in a response to a -randkey -keepold request, which allowed\nremote authenticated users to forge tickets by leveraging administrative\naccess.\n\nCVE-2014-5352: In the MIT krb5 libgssapi_krb5 library, after\ngss_process_context_token() is used to process a valid context\ndeletion token, the caller was left with a security context handle\ncontaining a dangling pointer.  Further uses of this handle would have\nresulted in use-after-free and double-free memory access violations.\nlibgssrpc server applications such as kadmind were vulnerable as they\ncan be instructed to call gss_process_context_token().\n\nCVE-2014-9421: If the MIT krb5 kadmind daemon receives invalid XDR\ndata from an authenticated user, it may have performed use-after-free and\ndouble-free memory access violations while cleaning up the partial\ndeserialization results. Other libgssrpc server applications might also\nbeen vulnerable if they contain insufficiently defensive XDR functions.\n\nCVE-2014-9422: The MIT krb5 kadmind daemon incorrectly accepted\nauthentications to two-component server principals whose first\ncomponent is a left substring of 'kadmin' or whose realm is a left\nprefix of the default realm.\n\nCVE-2014-9423: libgssrpc applications including kadmind output four or\neight bytes of uninitialized memory to the network as part of an\nunused 'handle' field in replies to clients.\n\nBugs fixed:\n- Work around replay cache creation race; (bnc#898439).\n","status":"published","published":"2015-01-21T10:07:55Z","modified":"2026-02-04T03:04:57.21208Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"SUSE-SU-2015:0290-2","title":"Security update for krb5","description":"\nMIT kerberos krb5 was updated to fix several security issues and bugs.\n\nSecurity issues fixed:\nCVE-2014-5351: The kadm5_randkey_principal_3 function in\nlib/kadm5/srv/svr_principal.c in kadmind in MIT Kerberos 5 (aka krb5)\nsent old keys in a response to a -randkey -keepold request, which allowed\nremote authenticated users to forge tickets by leveraging administrative\naccess.\n\nCVE-2014-5352: In the MIT krb5 libgssapi_krb5 library, after\ngss_process_context_token() is used to process a valid context\ndeletion token, the caller was left with a security context handle\ncontaining a dangling pointer.  Further uses of this handle would have\nresulted in use-after-free and double-free memory access violations.\nlibgssrpc server applications such as kadmind were vulnerable as they\ncan be instructed to call gss_process_context_token().\n\nCVE-2014-9421: If the MIT krb5 kadmind daemon receives invalid XDR\ndata from an authenticated user, it may have performed use-after-free and\ndouble-free memory access violations while cleaning up the partial\ndeserialization results. Other libgssrpc server applications might also\nbeen vulnerable if they contain insufficiently defensive XDR functions.\n\nCVE-2014-9422: The MIT krb5 kadmind daemon incorrectly accepted\nauthentications to two-component server principals whose first\ncomponent is a left substring of 'kadmin' or whose realm is a left\nprefix of the default realm.\n\nCVE-2014-9423: libgssrpc applications including kadmind output four or\neight bytes of uninitialized memory to the network as part of an\nunused 'handle' field in replies to clients.\n\nBugs fixed:\n- Work around replay cache creation race; (bnc#898439).\n","status":"published","published":"2015-01-21T10:07:55Z","modified":"2026-02-04T03:55:11.170582Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"UBUNTU-CVE-2014-9423","description":"The svcauth_gss_accept_sec_context function in lib/rpc/svc_auth_gss.c in MIT Kerberos 5 (aka krb5) 1.11.x through 1.11.5, 1.12.x through 1.12.2, and 1.13.x before 1.13.1 transmits uninitialized interposer data to clients, which allows remote attackers to obtain sensitive information from process heap memory by sniffing the network for data in a handle field.","status":"published","published":"2015-02-03T00:00:00Z","modified":"2026-04-22T09:54:51.258714Z","updated_at":"2026-11-02T15:54:09.378953Z"},{"id":"USN-2498-1","title":"krb5 vulnerabilities","description":"It was discovered that Kerberos incorrectly sent old keys in response to a\n-randkey -keepold request. An authenticated remote attacker could use this\nissue to forge tickets by leveraging administrative access. This issue\nonly affected Ubuntu 10.04 LTS, Ubuntu 12.04 LTS and Ubuntu 14.04 LTS.\n(CVE-2014-5351)\n\nIt was discovered that the libgssapi_krb5 library incorrectly processed\nsecurity context handles. A remote attacker could use this issue to cause\na denial of service, or possibly execute arbitrary code. (CVE-2014-5352)\n\nPatrik Kis discovered that Kerberos incorrectly handled LDAP queries with\nno results. An authenticated remote attacker could use this issue to cause\nthe KDC to crash, resulting in a denial of service. (CVE-2014-5353)\n\nIt was discovered that Kerberos incorrectly handled creating database\nentries for a keyless principal when using LDAP. An authenticated remote\nattacker could use this issue to cause the KDC to crash, resulting in a\ndenial of service. (CVE-2014-5354)\n\nIt was discovered that Kerberos incorrectly handled memory when processing\nXDR data. A remote attacker could use this issue to cause kadmind to crash,\nresulting in a denial of service, or possibly execute arbitrary code.\n(CVE-2014-9421)\n\nIt was discovered that Kerberos incorrectly handled two-component server\nprincipals. A remote attacker could use this issue to perform impersonation\nattacks. (CVE-2014-9422)\n\nIt was discovered that the libgssrpc library leaked uninitialized bytes. A\nremote attacker could use this issue to possibly obtain sensitive\ninformation. (CVE-2014-9423)\n","status":"published","published":"2015-02-10T20:04:14Z","modified":"2026-04-22T09:08:40.49136Z","updated_at":"2026-11-02T16:58:09.227524Z"}]}}