{"id":"CVE-2015-2697","aliases":["DEBIAN-CVE-2015-2697","DLA-340-1","DSA-3395-1","DSA-3395-2","EUVD-2015-2787","GHSA-rw46-7hq3-wqv6","MGASA-2015-0436","SUSE-SU-2015:1897-1","UBUNTU-CVE-2015-2697","USN-2810-1","openSUSE-SU-2024:10004-1"],"status":"published","title":"The build_principal_va function in lib/krb5/krb/bld_princ.c in MIT Kerberos 5 (aka krb5) before 1...","description":"The build_principal_va function in lib/krb5/krb/bld_princ.c in MIT Kerberos 5 (aka krb5) before 1.14 allows remote authenticated users to cause a denial of service (out-of-bounds read and KDC crash) via an initial '\\0' character in a long realm field within a TGS request.","severity":{"version":"2.0","score":4,"vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.04017,"percentile":0.90633,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-125"],"published":"2015-10-30T10:30:41Z","modified":"2026-09-09T06:47:25Z","fixes":[{"ecosystem":"Debian:12","package":"krb5","fixed_in":["1.13.2+dfsg-3"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"krb5","fixed_in":["1.13.2+dfsg-3"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"krb5","fixed_in":["1.13.2+dfsg-3"],"sources":["osv"]},{"ecosystem":"Debian:7","package":"krb5","fixed_in":["1.10.1+dfsg-5+deb7u6"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"krb5","fixed_in":["1.12+dfsg-2ubuntu5.2"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.2+dfsg-3"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.2+dfsg-3"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.2+dfsg-3"}]}]},{"source":"osv","ecosystem":"Debian:6.0","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.3+dfsg-4squeeze10"}]}],"versions":["1.8.3+dfsg-4","1.8.3+dfsg-4squeeze1","1.8.3+dfsg-4squeeze2","1.8.3+dfsg-4squeeze5","1.8.3+dfsg-4squeeze6","1.8.3+dfsg-4squeeze7","1.8.3+dfsg-4squeeze8","1.8.3+dfsg-4squeeze9"],"bundled":2},{"source":"osv","ecosystem":"Debian:7","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.1+dfsg-5+deb7u4"}]}],"versions":["1.10.1+dfsg-5","1.10.1+dfsg-5+deb7u1","1.10.1+dfsg-5+deb7u2","1.10.1+dfsg-5+deb7u3"],"bundled":3},{"source":"osv","ecosystem":"Debian:8","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.1+dfsg-19+deb8u1"}]}],"versions":["1.12.1+dfsg-19"],"bundled":3},{"source":"osv","ecosystem":"Debian:7","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.1+dfsg-5+deb7u6"}]}],"versions":["1.10.1+dfsg-5","1.10.1+dfsg-5+deb7u1","1.10.1+dfsg-5+deb7u2","1.10.1+dfsg-5+deb7u3","1.10.1+dfsg-5+deb7u4","1.10.1+dfsg-5+deb7u5"]},{"source":"osv","ecosystem":"Mageia:5","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.2-8.1.mga5"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.1-19.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.1-19.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.1-19.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.1-19.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12+dfsg-2ubuntu5.2"}]}],"versions":["1.10.1+dfsg-6.1ubuntu1","1.11.3+dfsg-3ubuntu2","1.12+dfsg-2ubuntu1","1.12+dfsg-2ubuntu2","1.12+dfsg-2ubuntu3","1.12+dfsg-2ubuntu4","1.12+dfsg-2ubuntu4.2","1.12+dfsg-2ubuntu5","1.12+dfsg-2ubuntu5.1"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12+dfsg-2ubuntu5.2"}]}],"versions":["1.10.1+dfsg-6.1ubuntu1","1.11.3+dfsg-3ubuntu2","1.12+dfsg-2ubuntu1","1.12+dfsg-2ubuntu2","1.12+dfsg-2ubuntu3","1.12+dfsg-2ubuntu4","1.12+dfsg-2ubuntu4.2","1.12+dfsg-2ubuntu5","1.12+dfsg-2ubuntu5.1"],"bundled":7},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15-1.1"}]}],"bundled":54}],"products":[{"vendor":"canonical","product":"ubuntu_linux"},{"vendor":"debian","product":"debian_linux"},{"vendor":"mit","product":"kerberos_5"},{"vendor":"opensuse","product":"leap"},{"vendor":"opensuse","product":"opensuse"},{"vendor":"oracle","product":"solaris"},{"vendor":"suse","product":"linux_enterprise_desktop"},{"vendor":"suse","product":"linux_enterprise_server"},{"vendor":"suse","product":"linux_enterprise_software_development_kit"}],"references":[{"url":"https://github.com/krb5/krb5/commit/f0c094a1b745d91ef2f9a4eae2149aac026a5789","tags":["x_refsource_CONFIRM","x_transferred","Patch","Third Party Advisory","advisory","fix"]},{"url":"http://www.securityfocus.com/bid/77581","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00006.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Mailing List","Third Party Advisory","advisory","article"]},{"url":"https://security.gentoo.org/glsa/201611-14","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","Third Party Advisory","advisory"]},{"url":"http://www.securitytracker.com/id/1034084","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00022.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Mailing List","Third Party Advisory","advisory","article"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00014.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Mailing List","Third Party Advisory","advisory","article"]},{"url":"http://krbdev.mit.edu/rt/Ticket/Display.html?id=8252","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory","advisory"]},{"url":"http://www.debian.org/security/2015/dsa-3395","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","Third Party Advisory","advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2810-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-2697"},{"url":"https://github.com/advisories/GHSA-rw46-7hq3-wqv6"},{"url":"https://security-tracker.debian.org/tracker/CVE-2015-2697","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2015-0436.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=17078","tags":["report"]},{"url":"https://lists.fedoraproject.org/pipermail/package-announce/2015-November/170683.html","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20151897-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/948011","tags":["report"]},{"url":"https://bugzilla.suse.com/952188","tags":["report"]},{"url":"https://bugzilla.suse.com/952189","tags":["report"]},{"url":"https://bugzilla.suse.com/952190","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2695","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2696","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2697","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2015-2697","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-2810-1","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-2697","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2002-2443","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2014-5355","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2015-2694","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2015-2695","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2015-2696","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2015-2698","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2002-2443","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-0844","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-0845","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-0846","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-0847","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-3295","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-4212","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-0283","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-0628","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-1320","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-1321","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-1322","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-1323","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-1324","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-4020","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-4021","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-4022","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-0281","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-0282","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-0284","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-0285","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-1527","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-1528","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-1529","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-1530","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-1012","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-1013","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-1016","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1415","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1417","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1418","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4341","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4342","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4343","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4344","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4345","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-5351","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-5352","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-5353","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-5354","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-5355","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-9421","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-9422","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-9423","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2694","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2698","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8629","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8630","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8631","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-3119","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-3120","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2015-2697","description":"The build_principal_va function in lib/krb5/krb/bld_princ.c in MIT Kerberos 5 (aka krb5) before 1.14 allows remote authenticated users to cause a denial of service (out-of-bounds read and KDC crash) via an initial '\\0' character in a long realm field within a TGS request.","status":"published","published":"2015-11-09T02:00:00Z","modified":"2024-08-06T05:24:38.817Z","updated_at":"2026-11-02T14:35:41.976732Z"}],"euvd":[{"id":"EUVD-2015-2787","description":"The build_principal_va function in lib/krb5/krb/bld_princ.c in MIT Kerberos 5 (aka krb5) before 1.14 allows remote authenticated users to cause a denial of service (out-of-bounds read and KDC crash) via an initial '\\0' character in a long realm field within a TGS request.","status":"published","published":"2015-11-09T02:00:00Z","modified":"2024-08-06T05:24:38Z","updated_at":"2026-11-03T02:22:11.095833Z"}],"ghsa":[{"id":"GHSA-rw46-7hq3-wqv6","title":"The build_principal_va function in lib/krb5/krb/bld_princ.c in MIT Kerberos 5 (aka krb5) before 1...","description":"The build_principal_va function in lib/krb5/krb/bld_princ.c in MIT Kerberos 5 (aka krb5) before 1.14 allows remote authenticated users to cause a denial of service (out-of-bounds read and KDC crash) via an initial '\\0' character in a long realm field within a TGS request.","status":"published","published":"2022-05-13T01:11:49Z","modified":"2023-02-01T05:03:54Z","cwes":["CWE-125"],"updated_at":"2026-11-02T14:50:06.799159Z"}],"nvd":[{"id":"CVE-2015-2697","description":"The build_principal_va function in lib/krb5/krb/bld_princ.c in MIT Kerberos 5 (aka krb5) before 1.14 allows remote authenticated users to cause a denial of service (out-of-bounds read and KDC crash) via an initial '\\0' character in a long realm field within a TGS request.","status":"published","published":"2015-11-09T03:59:03.343Z","modified":"2026-06-17T00:24:34.433Z","cvss":[{"version":"2.0","score":4,"vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T14:03:12.30866Z"}],"osv":[{"id":"CVE-2015-2697","description":"The build_principal_va function in lib/krb5/krb/bld_princ.c in MIT Kerberos 5 (aka krb5) before 1.14 allows remote authenticated users to cause a denial of service (out-of-bounds read and KDC crash) via an initial '\\0' character in a long realm field within a TGS request.","status":"published","published":"2015-11-09T03:59:03Z","modified":"2026-04-16T06:15:12.047741886Z","updated_at":"2026-11-02T15:44:00.594921Z"},{"id":"DEBIAN-CVE-2015-2697","description":"The build_principal_va function in lib/krb5/krb/bld_princ.c in MIT Kerberos 5 (aka krb5) before 1.14 allows remote authenticated users to cause a denial of service (out-of-bounds read and KDC crash) via an initial '\\0' character in a long realm field within a TGS request.","status":"published","published":"2015-11-09T03:59:03.343Z","modified":"2026-09-09T06:47:25.015938362Z","updated_at":"2026-11-02T15:45:26.752992Z"},{"id":"DLA-340-1","title":"krb5 - security update","status":"published","published":"2015-11-07T00:00:00Z","modified":"2026-03-09T01:21:59.13979Z","updated_at":"2026-11-02T15:46:11.734021Z"},{"id":"DSA-3395-1","title":"krb5 - security update","status":"published","published":"2015-11-06T00:00:00Z","modified":"2026-03-09T01:23:02.8409Z","updated_at":"2026-11-02T15:46:16.199525Z"},{"id":"DSA-3395-2","title":"krb5 - security update","status":"published","published":"2015-11-12T00:00:00Z","modified":"2026-03-09T01:19:32.00681Z","updated_at":"2026-11-02T15:46:16.199525Z"},{"id":"MGASA-2015-0436","title":"Updated krb5 packages fix security vulnerabilities","description":"Updated krb5 packages fix security vulnerabilities:\n\nIn MIT krb5 1.5 and later, applications which call\ngss_inquire_context() on a partially-established SPNEGO context can\ncause the GSS-API library to read from a pointer using the wrong type,\ngenerally causing a process crash.  This bug may go unnoticed, because\nthe most common SPNEGO authentication scenario establishes the context\nafter just one call to gss_accept_sec_context().  Java server\napplications using the native JGSS provider are vulnerable to this\nbug.  A carefully crafted SPNEGO packet might allow the\ngss_inquire_context() call to succeed with attacker-determined\nresults, but applications should not make access control decisions\nbased on gss_inquire_context() results prior to context establishment\n(CVE-2015-2695).\n\nIn MIT krb5 1.9 and later, applications which call\ngss_inquire_context() on a partially-established IAKERB context can\ncause the GSS-API library to read from a pointer using the wrong type,\ngenerally causing a process crash.  Java server applications using the\nnative JGSS provider are vulnerable to this bug.  A carefully crafted\nIAKERB packet might allow the gss_inquire_context() call to succeed\nwith attacker-determined results, but applications should not make\naccess control decisions based on gss_inquire_context() results prior\nto context establishment (CVE-2015-2696).\n\nIn MIT krb5 1.7 and later, an authenticated attacker may be able to\ncause a KDC to crash using a TGS request with a large realm field\nbeginning with a null byte.  If the KDC attempts to find a referral to\nanswer the request, it constructs a principal name for lookup using\nkrb5_build_principal() with the requested realm.  Due to a bug in this\nfunction, the null byte causes only one byte be allocated for the\nrealm field of the constructed principal, far less than its length.\nSubsequent operations on the lookup principal may cause a read beyond\nthe end of the mapped memory region, causing the KDC process to crash\n(CVE-2015-2697).\n","status":"published","published":"2015-11-07T20:11:27Z","modified":"2026-04-16T06:24:14.534976772Z","updated_at":"2026-11-02T15:49:39.792687Z"},{"id":"openSUSE-SU-2024:10004-1","title":"krb5-1.15-1.1 on GA media","description":"These are all security issues fixed in the krb5-1.15-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:18:07.629761Z","updated_at":"2026-11-02T16:58:33.135986Z"},{"id":"SUSE-SU-2015:1897-1","title":"Security update for krb5","description":"krb5 was updated to fix three security issues.\n\nThese security issues were fixed:\n- CVE-2015-2695: Applications which call gss_inquire_context() on a partially-established SPNEGO context could have caused the GSS-API library to read from a pointer using the wrong type, generally causing a process crash. (bsc#952188).\n- CVE-2015-2696: Applications which call gss_inquire_context() on a partially-established IAKERB context could have caused the GSS-API library to read from a pointer using the wrong type, generally causing a process crash. (bsc#952189).\n- CVE-2015-2697: Incorrect string handling in build_principal_va can lead to DOS (bsc#952190).\n  ","status":"published","published":"2015-10-30T10:30:41Z","modified":"2025-05-02T04:04:27.371718Z","updated_at":"2026-11-02T15:53:43.030986Z"},{"id":"UBUNTU-CVE-2015-2697","description":"The build_principal_va function in lib/krb5/krb/bld_princ.c in MIT Kerberos 5 (aka krb5) before 1.14 allows remote authenticated users to cause a denial of service (out-of-bounds read and KDC crash) via an initial '\\0' character in a long realm field within a TGS request.","status":"published","published":"2015-11-08T00:00:00Z","modified":"2026-04-22T10:05:35.625411Z","updated_at":"2026-11-02T15:54:10.045446Z"},{"id":"USN-2810-1","title":"krb5 vulnerabilities","description":"It was discovered that the Kerberos kpasswd service incorrectly handled\ncertain UDP packets. A remote attacker could possibly use this issue to\ncause resource consumption, resulting in a denial of service. This issue\nonly affected Ubuntu 12.04 LTS. (CVE-2002-2443)\n\nIt was discovered that Kerberos incorrectly handled null bytes in certain\ndata fields. A remote attacker could possibly use this issue to cause a\ndenial of service. This issue only affected Ubuntu 12.04 LTS and Ubuntu\n14.04 LTS. (CVE-2014-5355)\n\nIt was discovered that the Kerberos kdcpreauth modules incorrectly tracked\ncertain client requests. A remote attacker could possibly use this issue\nto bypass intended preauthentication requirements. This issue only affected\nUbuntu 14.04 LTS and Ubuntu 15.04. (CVE-2015-2694)\n\nIt was discovered that Kerberos incorrectly handled certain SPNEGO packets.\nA remote attacker could possibly use this issue to cause a denial of\nservice. (CVE-2015-2695)\n\nIt was discovered that Kerberos incorrectly handled certain IAKERB packets.\nA remote attacker could possibly use this issue to cause a denial of\nservice. (CVE-2015-2696, CVE-2015-2698)\n\nIt was discovered that Kerberos incorrectly handled certain TGS requests. A\nremote attacker could possibly use this issue to cause a denial of service.\n(CVE-2015-2697)\n","status":"published","published":"2015-11-12T17:50:55Z","modified":"2026-04-22T09:18:36.934079Z","updated_at":"2026-11-02T16:58:10.303275Z"}]}}