{"id":"CVE-2015-2695","aliases":["DEBIAN-CVE-2015-2695","DLA-340-1","DSA-3395-1","EUVD-2015-2785","GHSA-px5h-p825-xfmc","MGASA-2015-0436","SUSE-SU-2015:1897-1","SUSE-SU-2015:1898-1","SUSE-SU-2015:2294-1","UBUNTU-CVE-2015-2695","USN-2810-1","openSUSE-SU-2024:10004-1"],"status":"published","title":"lib/gssapi/spnego/spnego_mech.c in MIT Kerberos 5 (aka krb5) before 1.14 relies on an...","description":"lib/gssapi/spnego/spnego_mech.c in MIT Kerberos 5 (aka krb5) before 1.14 relies on an inappropriate context handle, which allows remote attackers to cause a denial of service (incorrect pointer read and process crash) via a crafted SPNEGO packet that is mishandled during a gss_inquire_context call.","severity":{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.06001,"percentile":0.93374,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-763"],"published":"2015-10-30T10:30:41Z","modified":"2026-09-09T06:47:18Z","fixes":[{"ecosystem":"Debian:12","package":"krb5","fixed_in":["1.13.2+dfsg-3"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"krb5","fixed_in":["1.13.2+dfsg-3"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"krb5","fixed_in":["1.13.2+dfsg-3"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 11 SP3","package":"krb5","fixed_in":["1.6.3-133.49.97.1","1.6.3-133.49.103.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 11 SP4","package":"krb5","fixed_in":["1.6.3-133.49.97.1","1.6.3-133.49.103.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Desktop 11 SP3","package":"krb5","fixed_in":["1.6.3-133.49.97.1","1.6.3-133.49.103.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Desktop 11 SP4","package":"krb5","fixed_in":["1.6.3-133.49.97.1","1.6.3-133.49.103.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 11 SP3","package":"krb5","fixed_in":["1.6.3-133.49.97.1","1.6.3-133.49.103.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 11 SP3","package":"krb5-doc","fixed_in":["1.6.3-133.49.97.3"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 11 SP3","package":"krb5-plugins","fixed_in":["1.6.3-133.49.97.3"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 11 SP3-TERADATA","package":"krb5","fixed_in":["1.6.3-133.49.97.1","1.6.3-133.49.103.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 11 SP3-TERADATA","package":"krb5-doc","fixed_in":["1.6.3-133.49.97.3"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 11 SP3-TERADATA","package":"krb5-plugins","fixed_in":["1.6.3-133.49.97.3"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP3","package":"krb5","fixed_in":["1.6.3-133.49.97.1","1.6.3-133.49.103.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP3","package":"krb5-doc","fixed_in":["1.6.3-133.49.97.3"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP3","package":"krb5-plugins","fixed_in":["1.6.3-133.49.97.3"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"krb5","fixed_in":["1.6.3-133.49.97.1","1.6.3-133.49.103.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"krb5-doc","fixed_in":["1.6.3-133.49.97.3"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"krb5-plugins","fixed_in":["1.6.3-133.49.97.3"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"krb5","fixed_in":["1.6.3-133.49.97.1","1.6.3-133.49.103.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"krb5-doc","fixed_in":["1.6.3-133.49.97.3"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"krb5-plugins","fixed_in":["1.6.3-133.49.97.3"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"krb5","fixed_in":["1.12+dfsg-2ubuntu5.2"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.2+dfsg-3"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.2+dfsg-3"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.2+dfsg-3"}]}]},{"source":"osv","ecosystem":"Debian:6.0","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.3+dfsg-4squeeze10"}]}],"versions":["1.8.3+dfsg-4","1.8.3+dfsg-4squeeze1","1.8.3+dfsg-4squeeze2","1.8.3+dfsg-4squeeze5","1.8.3+dfsg-4squeeze6","1.8.3+dfsg-4squeeze7","1.8.3+dfsg-4squeeze8","1.8.3+dfsg-4squeeze9"],"bundled":2},{"source":"osv","ecosystem":"Debian:7","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.1+dfsg-5+deb7u4"}]}],"versions":["1.10.1+dfsg-5","1.10.1+dfsg-5+deb7u1","1.10.1+dfsg-5+deb7u2","1.10.1+dfsg-5+deb7u3"],"bundled":3},{"source":"osv","ecosystem":"Debian:8","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.1+dfsg-19+deb8u1"}]}],"versions":["1.12.1+dfsg-19"],"bundled":3},{"source":"osv","ecosystem":"Mageia:5","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.2-8.1.mga5"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.1-19.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.1-19.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.1-19.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.1-19.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 11 SP3","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.3-133.49.97.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 11 SP4","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.3-133.49.97.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 11 SP3","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.3-133.49.97.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 11 SP4","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.3-133.49.97.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.3-133.49.97.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3","package":"krb5-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.3-133.49.97.3"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3","package":"krb5-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.3-133.49.97.3"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3-TERADATA","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.3-133.49.97.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3-TERADATA","package":"krb5-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.3-133.49.97.3"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3-TERADATA","package":"krb5-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.3-133.49.97.3"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP3","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.3-133.49.97.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP3","package":"krb5-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.3-133.49.97.3"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP3","package":"krb5-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.3-133.49.97.3"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.3-133.49.97.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"krb5-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.3-133.49.97.3"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"krb5-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.3-133.49.97.3"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.3-133.49.97.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"krb5-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.3-133.49.97.3"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"krb5-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.3-133.49.97.3"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 11 SP3","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.3-133.49.103.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 11 SP4","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.3-133.49.103.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 11 SP3","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.3-133.49.103.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 11 SP4","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.3-133.49.103.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.3-133.49.103.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3-TERADATA","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.3-133.49.103.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP3","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.3-133.49.103.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.3-133.49.103.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.3-133.49.103.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12+dfsg-2ubuntu5.2"}]}],"versions":["1.10.1+dfsg-6.1ubuntu1","1.11.3+dfsg-3ubuntu2","1.12+dfsg-2ubuntu1","1.12+dfsg-2ubuntu2","1.12+dfsg-2ubuntu3","1.12+dfsg-2ubuntu4","1.12+dfsg-2ubuntu4.2","1.12+dfsg-2ubuntu5","1.12+dfsg-2ubuntu5.1"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12+dfsg-2ubuntu5.2"}]}],"versions":["1.10.1+dfsg-6.1ubuntu1","1.11.3+dfsg-3ubuntu2","1.12+dfsg-2ubuntu1","1.12+dfsg-2ubuntu2","1.12+dfsg-2ubuntu3","1.12+dfsg-2ubuntu4","1.12+dfsg-2ubuntu4.2","1.12+dfsg-2ubuntu5","1.12+dfsg-2ubuntu5.1"],"bundled":7},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15-1.1"}]}],"bundled":54}],"products":[{"vendor":"canonical","product":"ubuntu_linux"},{"vendor":"debian","product":"debian_linux"},{"vendor":"mit","product":"kerberos_5"},{"vendor":"opensuse","product":"leap"},{"vendor":"opensuse","product":"opensuse"},{"vendor":"oracle","product":"solaris"},{"vendor":"suse","product":"linux_enterprise_desktop"},{"vendor":"suse","product":"linux_enterprise_server"},{"vendor":"suse","product":"linux_enterprise_software_development_kit"}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00007.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Mailing List","Third Party Advisory","advisory","article"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00006.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Mailing List","Third Party Advisory","advisory","article"]},{"url":"https://github.com/krb5/krb5/commit/b51b33f2bc5d1497ddf5bd107f791c101695000d","tags":["x_refsource_CONFIRM","x_transferred","Patch","Third Party Advisory","advisory","fix"]},{"url":"https://security.gentoo.org/glsa/201611-14","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","Third Party Advisory","advisory"]},{"url":"http://www.securitytracker.com/id/1034084","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"http://krbdev.mit.edu/rt/Ticket/Display.html?id=8244","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory","advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00022.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Mailing List","Third Party Advisory","advisory","article"]},{"url":"http://www.securityfocus.com/bid/90687","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00014.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Mailing List","Third Party Advisory","advisory","article"]},{"url":"http://www.debian.org/security/2015/dsa-3395","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","Third Party Advisory","advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2810-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-2695"},{"url":"https://github.com/advisories/GHSA-px5h-p825-xfmc"},{"url":"https://security-tracker.debian.org/tracker/CVE-2015-2695","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2015-0436.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=17078","tags":["report"]},{"url":"https://lists.fedoraproject.org/pipermail/package-announce/2015-November/170683.html","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20151897-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/948011","tags":["report"]},{"url":"https://bugzilla.suse.com/952188","tags":["report"]},{"url":"https://bugzilla.suse.com/952189","tags":["report"]},{"url":"https://bugzilla.suse.com/952190","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2695","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2696","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2697","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20151898-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20152294-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/954270","tags":["report"]},{"url":"https://bugzilla.suse.com/954470","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2015-2695","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-2810-1","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-2695","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2002-2443","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2014-5355","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2015-2694","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2015-2696","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2015-2697","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2015-2698","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2002-2443","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-0844","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-0845","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-0846","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-0847","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-3295","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-4212","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-0283","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-0628","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-1320","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-1321","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-1322","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-1323","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-1324","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-4020","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-4021","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-4022","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-0281","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-0282","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-0284","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-0285","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-1527","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-1528","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-1529","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-1530","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-1012","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-1013","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-1016","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1415","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1417","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1418","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4341","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4342","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4343","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4344","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4345","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-5351","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-5352","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-5353","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-5354","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-5355","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-9421","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-9422","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-9423","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2694","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2698","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8629","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8630","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8631","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-3119","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-3120","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2015-2695","description":"lib/gssapi/spnego/spnego_mech.c in MIT Kerberos 5 (aka krb5) before 1.14 relies on an inappropriate context handle, which allows remote attackers to cause a denial of service (incorrect pointer read and process crash) via a crafted SPNEGO packet that is mishandled during a gss_inquire_context call.","status":"published","published":"2015-11-09T02:00:00Z","modified":"2024-08-06T05:24:38.496Z","updated_at":"2026-11-02T14:35:41.621934Z"}],"euvd":[{"id":"EUVD-2015-2785","description":"lib/gssapi/spnego/spnego_mech.c in MIT Kerberos 5 (aka krb5) before 1.14 relies on an inappropriate context handle, which allows remote attackers to cause a denial of service (incorrect pointer read and process crash) via a crafted SPNEGO packet that is mishandled during a gss_inquire_context call.","status":"published","published":"2015-11-09T02:00:00Z","modified":"2024-08-06T05:24:38Z","updated_at":"2026-11-03T02:22:11.095833Z"}],"ghsa":[{"id":"GHSA-px5h-p825-xfmc","title":"lib/gssapi/spnego/spnego_mech.c in MIT Kerberos 5 (aka krb5) before 1.14 relies on an...","description":"lib/gssapi/spnego/spnego_mech.c in MIT Kerberos 5 (aka krb5) before 1.14 relies on an inappropriate context handle, which allows remote attackers to cause a denial of service (incorrect pointer read and process crash) via a crafted SPNEGO packet that is mishandled during a gss_inquire_context call.","status":"published","published":"2022-05-13T01:11:49Z","modified":"2023-02-01T05:03:47Z","cwes":["CWE-763"],"updated_at":"2026-11-02T14:50:06.238998Z"}],"nvd":[{"id":"CVE-2015-2695","description":"lib/gssapi/spnego/spnego_mech.c in MIT Kerberos 5 (aka krb5) before 1.14 relies on an inappropriate context handle, which allows remote attackers to cause a denial of service (incorrect pointer read and process crash) via a crafted SPNEGO packet that is mishandled during a gss_inquire_context call.","status":"published","published":"2015-11-09T03:59:00.107Z","modified":"2026-06-17T00:24:34.133Z","cvss":[{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-763"],"updated_at":"2026-11-02T14:03:12.30866Z"}],"osv":[{"id":"CVE-2015-2695","description":"lib/gssapi/spnego/spnego_mech.c in MIT Kerberos 5 (aka krb5) before 1.14 relies on an inappropriate context handle, which allows remote attackers to cause a denial of service (incorrect pointer read and process crash) via a crafted SPNEGO packet that is mishandled during a gss_inquire_context call.","status":"published","published":"2015-11-09T03:59:00Z","modified":"2026-04-16T06:19:54.271680221Z","updated_at":"2026-11-02T15:44:00.594921Z"},{"id":"DEBIAN-CVE-2015-2695","description":"lib/gssapi/spnego/spnego_mech.c in MIT Kerberos 5 (aka krb5) before 1.14 relies on an inappropriate context handle, which allows remote attackers to cause a denial of service (incorrect pointer read and process crash) via a crafted SPNEGO packet that is mishandled during a gss_inquire_context call.","status":"published","published":"2015-11-09T03:59:00.107Z","modified":"2026-09-09T06:47:18.875449029Z","updated_at":"2026-11-02T15:45:26.752992Z"},{"id":"DLA-340-1","title":"krb5 - security update","status":"published","published":"2015-11-07T00:00:00Z","modified":"2026-03-09T01:21:59.13979Z","updated_at":"2026-11-02T15:46:11.734021Z"},{"id":"DSA-3395-1","title":"krb5 - security update","status":"published","published":"2015-11-06T00:00:00Z","modified":"2026-03-09T01:23:02.8409Z","updated_at":"2026-11-02T15:46:16.199525Z"},{"id":"MGASA-2015-0436","title":"Updated krb5 packages fix security vulnerabilities","description":"Updated krb5 packages fix security vulnerabilities:\n\nIn MIT krb5 1.5 and later, applications which call\ngss_inquire_context() on a partially-established SPNEGO context can\ncause the GSS-API library to read from a pointer using the wrong type,\ngenerally causing a process crash.  This bug may go unnoticed, because\nthe most common SPNEGO authentication scenario establishes the context\nafter just one call to gss_accept_sec_context().  Java server\napplications using the native JGSS provider are vulnerable to this\nbug.  A carefully crafted SPNEGO packet might allow the\ngss_inquire_context() call to succeed with attacker-determined\nresults, but applications should not make access control decisions\nbased on gss_inquire_context() results prior to context establishment\n(CVE-2015-2695).\n\nIn MIT krb5 1.9 and later, applications which call\ngss_inquire_context() on a partially-established IAKERB context can\ncause the GSS-API library to read from a pointer using the wrong type,\ngenerally causing a process crash.  Java server applications using the\nnative JGSS provider are vulnerable to this bug.  A carefully crafted\nIAKERB packet might allow the gss_inquire_context() call to succeed\nwith attacker-determined results, but applications should not make\naccess control decisions based on gss_inquire_context() results prior\nto context establishment (CVE-2015-2696).\n\nIn MIT krb5 1.7 and later, an authenticated attacker may be able to\ncause a KDC to crash using a TGS request with a large realm field\nbeginning with a null byte.  If the KDC attempts to find a referral to\nanswer the request, it constructs a principal name for lookup using\nkrb5_build_principal() with the requested realm.  Due to a bug in this\nfunction, the null byte causes only one byte be allocated for the\nrealm field of the constructed principal, far less than its length.\nSubsequent operations on the lookup principal may cause a read beyond\nthe end of the mapped memory region, causing the KDC process to crash\n(CVE-2015-2697).\n","status":"published","published":"2015-11-07T20:11:27Z","modified":"2026-04-16T06:24:14.534976772Z","updated_at":"2026-11-02T15:49:39.792687Z"},{"id":"openSUSE-SU-2024:10004-1","title":"krb5-1.15-1.1 on GA media","description":"These are all security issues fixed in the krb5-1.15-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:18:07.629761Z","updated_at":"2026-11-02T16:58:33.135986Z"},{"id":"SUSE-SU-2015:1897-1","title":"Security update for krb5","description":"krb5 was updated to fix three security issues.\n\nThese security issues were fixed:\n- CVE-2015-2695: Applications which call gss_inquire_context() on a partially-established SPNEGO context could have caused the GSS-API library to read from a pointer using the wrong type, generally causing a process crash. (bsc#952188).\n- CVE-2015-2696: Applications which call gss_inquire_context() on a partially-established IAKERB context could have caused the GSS-API library to read from a pointer using the wrong type, generally causing a process crash. (bsc#952189).\n- CVE-2015-2697: Incorrect string handling in build_principal_va can lead to DOS (bsc#952190).\n  ","status":"published","published":"2015-10-30T10:30:41Z","modified":"2025-05-02T04:04:27.371718Z","updated_at":"2026-11-02T15:53:43.030986Z"},{"id":"SUSE-SU-2015:1898-1","title":"Security update for krb5","description":"krb5 was updated to fix one security issue.\n\nThis security issue was fixed:\n- CVE-2015-2695: Applications which call gss_inquire_context() on a partially-established SPNEGO context could have caused the GSS-API library to read from a pointer using the wrong type, generally causing a process crash (bsc#952188).\n  ","status":"published","published":"2015-10-30T10:39:01Z","modified":"2025-05-02T04:04:27.433514Z","updated_at":"2026-11-02T15:53:43.030986Z"},{"id":"SUSE-SU-2015:2294-1","title":"Security update for krb5","description":"The krb5 package was updated to fix the following security and non security issues:\n\n- CVE-2015-2695: Fixed missing functions that were still vulnerable (bsc#954270).\n- Fixed a memory leak in the handling of error messages (bsc#954470). \n","status":"published","published":"2015-12-17T11:12:25Z","modified":"2026-02-04T03:49:27.171342Z","updated_at":"2026-11-02T15:53:43.030986Z"},{"id":"UBUNTU-CVE-2015-2695","description":"lib/gssapi/spnego/spnego_mech.c in MIT Kerberos 5 (aka krb5) before 1.14 relies on an inappropriate context handle, which allows remote attackers to cause a denial of service (incorrect pointer read and process crash) via a crafted SPNEGO packet that is mishandled during a gss_inquire_context call.","status":"published","published":"2015-11-08T00:00:00Z","modified":"2026-04-22T10:06:08.242073Z","updated_at":"2026-11-02T15:54:10.045446Z"},{"id":"USN-2810-1","title":"krb5 vulnerabilities","description":"It was discovered that the Kerberos kpasswd service incorrectly handled\ncertain UDP packets. A remote attacker could possibly use this issue to\ncause resource consumption, resulting in a denial of service. This issue\nonly affected Ubuntu 12.04 LTS. (CVE-2002-2443)\n\nIt was discovered that Kerberos incorrectly handled null bytes in certain\ndata fields. A remote attacker could possibly use this issue to cause a\ndenial of service. This issue only affected Ubuntu 12.04 LTS and Ubuntu\n14.04 LTS. (CVE-2014-5355)\n\nIt was discovered that the Kerberos kdcpreauth modules incorrectly tracked\ncertain client requests. A remote attacker could possibly use this issue\nto bypass intended preauthentication requirements. This issue only affected\nUbuntu 14.04 LTS and Ubuntu 15.04. (CVE-2015-2694)\n\nIt was discovered that Kerberos incorrectly handled certain SPNEGO packets.\nA remote attacker could possibly use this issue to cause a denial of\nservice. (CVE-2015-2695)\n\nIt was discovered that Kerberos incorrectly handled certain IAKERB packets.\nA remote attacker could possibly use this issue to cause a denial of\nservice. (CVE-2015-2696, CVE-2015-2698)\n\nIt was discovered that Kerberos incorrectly handled certain TGS requests. A\nremote attacker could possibly use this issue to cause a denial of service.\n(CVE-2015-2697)\n","status":"published","published":"2015-11-12T17:50:55Z","modified":"2026-04-22T09:18:36.934079Z","updated_at":"2026-11-02T16:58:10.303275Z"}]}}