CVE-2014-9422

The check_rpcsec_auth function in kadmin/server/kadm_rpc_svc.c in kadmind in MIT Kerberos 5 (aka krb5) through 1.11.5, 1.12.x through 1.12.2, and 1.13.x before 1.13.1 allows remote authenticated users to bypass a kadmin/* authorization check and obtain administrative access by leveraging access to a two-component principal with an initial "kadmind" substring, as demonstrated by a "ka/x" principal.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
6.1 UNKNOWN
NETWORK
HIGH
AV:N/AC:H/Au:S/C:P/I:P/A:C
Base Score
CVSS 3.x
EPSS Score
Percentile: 74%
Affected Products (NVD)
VendorProductVersion
mitkerberos_5
1.11
mitkerberos_5
1.11.1
mitkerberos_5
1.11.2
mitkerberos_5
1.11.3
mitkerberos_5
1.11.4
mitkerberos_5
1.11.5
mitkerberos_5
1.12
mitkerberos_5
1.12.1
mitkerberos_5
1.12.2
mitkerberos_5
1.13
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
krb5
bookworm
1.20.1-2+deb12u2
fixed
bookworm (security)
1.20.1-2+deb12u2
fixed
bullseye
1.18.3-6+deb11u5
fixed
bullseye (security)
1.18.3-6+deb11u5
fixed
sid
1.21.3-3
fixed
trixie
1.21.3-3
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
krb5
lucid
Fixed 1.8.1+dfsg-2ubuntu0.14
released
precise
Fixed 1.10+dfsg~beta1-2ubuntu0.6
released
trusty
Fixed 1.12+dfsg-2ubuntu5.1
released
utopic
Fixed 1.12.1+dfsg-10ubuntu0.1
released
openSUSE logo
openSUSE / SLES Releases
openSUSE Product
Release
krb5
suse enterprise desktop 15
1.15.2-4.25
fixed
suse enterprise desktop 15 SP1
1.16.3-1.16
fixed
suse enterprise desktop 15 SP2
1.16.3-3.6.1
fixed
suse enterprise desktop 15 SP3
1.16.3-3.15.1
fixed
suse enterprise desktop 15 SP4
1.19.2-150400.1.9
fixed
suse enterprise desktop 15 SP5
1.20.1-150500.1.2
fixed
suse enterprise desktop 15 SP6
1.20.1-150600.9.2
fixed
suse enterprise desktop 15 SP7
1.20.1-150600.11.8.1
fixed
suse enterprise sap 12
1.12.1-9.1
fixed
suse enterprise sap 12 SP5
1.12.5-40.37.7
fixed
suse enterprise sap 15
1.15.2-4.25
fixed
suse enterprise sap 15 SP1
1.16.3-1.16
fixed
suse enterprise sap 15 SP2
1.16.3-3.6.1
fixed
suse enterprise sap 15 SP3
1.16.3-3.15.1
fixed
suse enterprise sap 15 SP4
1.19.2-150400.1.9
fixed
suse enterprise sap 15 SP5
1.20.1-150500.1.2
fixed
suse enterprise sap 15 SP6
1.20.1-150600.9.2
fixed
suse enterprise sap 15 SP7
1.20.1-150600.11.8.1
fixed
suse enterprise server 12
1.12.1-9.1
fixed
suse enterprise server 12 SP2
1.12.5-39.1
fixed
suse enterprise server 12 SP3
1.12.5-39.1
fixed
suse enterprise server 12 SP5
1.12.5-40.37.7
fixed
suse enterprise server 15
1.15.2-4.25
fixed
suse enterprise server 15 SP1
1.16.3-1.16
fixed
suse enterprise server 15 SP2
1.16.3-3.6.1
fixed
suse enterprise server 15 SP3
1.16.3-3.15.1
fixed
suse enterprise server 15 SP4
1.19.2-150400.1.9
fixed
suse enterprise server 15 SP5
1.20.1-150500.1.2
fixed
suse enterprise server 15 SP6
1.20.1-150600.9.2
fixed
suse enterprise server 15 SP7
1.20.1-150600.11.8.1
fixed
krb5-32bit
suse enterprise desktop 15
1.15.2-4.25
fixed
suse enterprise desktop 15 SP1
1.16.3-1.16
fixed
suse enterprise desktop 15 SP2
1.16.3-3.6.1
fixed
suse enterprise desktop 15 SP3
1.16.3-3.15.1
fixed
suse enterprise desktop 15 SP4
1.19.2-150400.1.9
fixed
suse enterprise desktop 15 SP5
1.20.1-150500.1.2
fixed
suse enterprise desktop 15 SP6
1.20.1-150600.9.2
fixed
suse enterprise desktop 15 SP7
1.20.1-150600.11.8.1
fixed
suse enterprise sap 12
1.12.1-9.1
fixed
suse enterprise sap 12 SP5
1.12.5-40.37.7
fixed
suse enterprise sap 15
1.15.2-4.25
fixed
suse enterprise sap 15 SP1
1.16.3-1.16
fixed
suse enterprise sap 15 SP2
1.16.3-3.6.1
fixed
suse enterprise sap 15 SP3
1.16.3-3.15.1
fixed
suse enterprise sap 15 SP4
1.19.2-150400.1.9
fixed
suse enterprise sap 15 SP5
1.20.1-150500.1.2
fixed
suse enterprise sap 15 SP6
1.20.1-150600.9.2
fixed
suse enterprise sap 15 SP7
1.20.1-150600.11.8.1
fixed
suse enterprise server 12
1.12.1-9.1
fixed
suse enterprise server 12 SP2
1.12.5-39.1
fixed
suse enterprise server 12 SP3
1.12.5-39.1
fixed
suse enterprise server 12 SP5
1.12.5-40.37.7
fixed
suse enterprise server 15
1.15.2-4.25
fixed
suse enterprise server 15 SP1
1.16.3-1.16
fixed
suse enterprise server 15 SP2
1.16.3-3.6.1
fixed
suse enterprise server 15 SP3
1.16.3-3.15.1
fixed
suse enterprise server 15 SP4
1.19.2-150400.1.9
fixed
suse enterprise server 15 SP5
1.20.1-150500.1.2
fixed
suse enterprise server 15 SP6
1.20.1-150600.9.2
fixed
suse enterprise server 15 SP7
1.20.1-150600.11.8.1
fixed
krb5-client
suse enterprise desktop 15
1.15.2-4.25
fixed
suse enterprise desktop 15 SP1
1.16.3-1.16
fixed
suse enterprise desktop 15 SP2
1.16.3-3.6.1
fixed
suse enterprise desktop 15 SP3
1.16.3-3.15.1
fixed
suse enterprise desktop 15 SP4
1.19.2-150400.1.9
fixed
suse enterprise desktop 15 SP5
1.20.1-150500.1.2
fixed
suse enterprise desktop 15 SP6
1.20.1-150600.9.2
fixed
suse enterprise desktop 15 SP7
1.20.1-150600.11.8.1
fixed
suse enterprise sap 12
1.12.1-9.1
fixed
suse enterprise sap 12 SP5
1.12.5-40.37.7
fixed
suse enterprise sap 15
1.15.2-4.25
fixed
suse enterprise sap 15 SP1
1.16.3-1.16
fixed
suse enterprise sap 15 SP2
1.16.3-3.6.1
fixed
suse enterprise sap 15 SP3
1.16.3-3.15.1
fixed
suse enterprise sap 15 SP4
1.19.2-150400.1.9
fixed
suse enterprise sap 15 SP5
1.20.1-150500.1.2
fixed
suse enterprise sap 15 SP6
1.20.1-150600.9.2
fixed
suse enterprise sap 15 SP7
1.20.1-150600.11.8.1
fixed
suse enterprise server 12
1.12.1-9.1
fixed
suse enterprise server 12 SP2
1.12.5-39.1
fixed
suse enterprise server 12 SP3
1.12.5-39.1
fixed
suse enterprise server 12 SP5
1.12.5-40.37.7
fixed
suse enterprise server 15
1.15.2-4.25
fixed
suse enterprise server 15 SP1
1.16.3-1.16
fixed
suse enterprise server 15 SP2
1.16.3-3.6.1
fixed
suse enterprise server 15 SP3
1.16.3-3.15.1
fixed
suse enterprise server 15 SP4
1.19.2-150400.1.9
fixed
suse enterprise server 15 SP5
1.20.1-150500.1.2
fixed
suse enterprise server 15 SP6
1.20.1-150600.9.2
fixed
suse enterprise server 15 SP7
1.20.1-150600.11.8.1
fixed
krb5-devel
suse enterprise desktop 15
1.15.2-4.25
fixed
suse enterprise desktop 15 SP1
1.16.3-1.16
fixed
suse enterprise desktop 15 SP2
1.16.3-3.6.1
fixed
suse enterprise desktop 15 SP3
1.16.3-3.15.1
fixed
suse enterprise desktop 15 SP4
1.19.2-150400.1.9
fixed
suse enterprise desktop 15 SP5
1.20.1-150500.1.2
fixed
suse enterprise desktop 15 SP6
1.20.1-150600.9.2
fixed
suse enterprise desktop 15 SP7
1.20.1-150600.11.8.1
fixed
suse enterprise sap 15
1.15.2-4.25
fixed
suse enterprise sap 15 SP1
1.16.3-1.16
fixed
suse enterprise sap 15 SP2
1.16.3-3.6.1
fixed
suse enterprise sap 15 SP3
1.16.3-3.15.1
fixed
suse enterprise sap 15 SP4
1.19.2-150400.1.9
fixed
suse enterprise sap 15 SP5
1.20.1-150500.1.2
fixed
suse enterprise sap 15 SP6
1.20.1-150600.9.2
fixed
suse enterprise sap 15 SP7
1.20.1-150600.11.8.1
fixed
suse enterprise server 15
1.15.2-4.25
fixed
suse enterprise server 15 SP1
1.16.3-1.16
fixed
suse enterprise server 15 SP2
1.16.3-3.6.1
fixed
suse enterprise server 15 SP3
1.16.3-3.15.1
fixed
suse enterprise server 15 SP4
1.19.2-150400.1.9
fixed
suse enterprise server 15 SP5
1.20.1-150500.1.2
fixed
suse enterprise server 15 SP6
1.20.1-150600.9.2
fixed
suse enterprise server 15 SP7
1.20.1-150600.11.8.1
fixed
krb5-doc
suse enterprise sap 12
1.12.1-9.1
fixed
suse enterprise sap 12 SP5
1.12.5-40.37.7
fixed
suse enterprise server 12
1.12.1-9.1
fixed
suse enterprise server 12 SP2
1.12.5-39.1
fixed
suse enterprise server 12 SP3
1.12.5-39.1
fixed
suse enterprise server 12 SP5
1.12.5-40.37.7
fixed
krb5-plugin-kdb-ldap
suse enterprise sap 12
1.12.1-9.1
fixed
suse enterprise sap 12 SP5
1.12.5-40.37.7
fixed
suse enterprise sap 15
1.15.2-4.25
fixed
suse enterprise sap 15 SP1
1.16.3-1.16
fixed
suse enterprise sap 15 SP2
1.16.3-3.6.1
fixed
suse enterprise sap 15 SP3
1.16.3-3.15.1
fixed
suse enterprise sap 15 SP4
1.19.2-150400.1.9
fixed
suse enterprise sap 15 SP7
1.20.1-150600.11.8.1
fixed
suse enterprise server 12
1.12.1-9.1
fixed
suse enterprise server 12 SP2
1.12.5-39.1
fixed
suse enterprise server 12 SP3
1.12.5-39.1
fixed
suse enterprise server 12 SP5
1.12.5-40.37.7
fixed
suse enterprise server 15
1.15.2-4.25
fixed
suse enterprise server 15 SP1
1.16.3-1.16
fixed
suse enterprise server 15 SP2
1.16.3-3.6.1
fixed
suse enterprise server 15 SP3
1.16.3-3.15.1
fixed
suse enterprise server 15 SP4
1.19.2-150400.1.9
fixed
suse enterprise server 15 SP7
1.20.1-150600.11.8.1
fixed
krb5-plugin-preauth-otp
suse enterprise desktop 15
1.15.2-4.25
fixed
suse enterprise desktop 15 SP1
1.16.3-1.16
fixed
suse enterprise desktop 15 SP2
1.16.3-3.6.1
fixed
suse enterprise desktop 15 SP3
1.16.3-3.15.1
fixed
suse enterprise desktop 15 SP4
1.19.2-150400.1.9
fixed
suse enterprise desktop 15 SP5
1.20.1-150500.1.2
fixed
suse enterprise desktop 15 SP6
1.20.1-150600.9.2
fixed
suse enterprise desktop 15 SP7
1.20.1-150600.11.8.1
fixed
suse enterprise sap 12
1.12.1-9.1
fixed
suse enterprise sap 12 SP5
1.12.5-40.37.7
fixed
suse enterprise sap 15
1.15.2-4.25
fixed
suse enterprise sap 15 SP1
1.16.3-1.16
fixed
suse enterprise sap 15 SP2
1.16.3-3.6.1
fixed
suse enterprise sap 15 SP3
1.16.3-3.15.1
fixed
suse enterprise sap 15 SP4
1.19.2-150400.1.9
fixed
suse enterprise sap 15 SP5
1.20.1-150500.1.2
fixed
suse enterprise sap 15 SP6
1.20.1-150600.9.2
fixed
suse enterprise sap 15 SP7
1.20.1-150600.11.8.1
fixed
suse enterprise server 12
1.12.1-9.1
fixed
suse enterprise server 12 SP2
1.12.5-39.1
fixed
suse enterprise server 12 SP3
1.12.5-39.1
fixed
suse enterprise server 12 SP5
1.12.5-40.37.7
fixed
suse enterprise server 15
1.15.2-4.25
fixed
suse enterprise server 15 SP1
1.16.3-1.16
fixed
suse enterprise server 15 SP2
1.16.3-3.6.1
fixed
suse enterprise server 15 SP3
1.16.3-3.15.1
fixed
suse enterprise server 15 SP4
1.19.2-150400.1.9
fixed
suse enterprise server 15 SP5
1.20.1-150500.1.2
fixed
suse enterprise server 15 SP6
1.20.1-150600.9.2
fixed
suse enterprise server 15 SP7
1.20.1-150600.11.8.1
fixed
krb5-plugin-preauth-pkinit
suse enterprise desktop 15
1.15.2-4.25
fixed
suse enterprise desktop 15 SP1
1.16.3-1.16
fixed
suse enterprise desktop 15 SP2
1.16.3-3.6.1
fixed
suse enterprise desktop 15 SP3
1.16.3-3.15.1
fixed
suse enterprise desktop 15 SP4
1.19.2-150400.1.9
fixed
suse enterprise desktop 15 SP5
1.20.1-150500.1.2
fixed
suse enterprise desktop 15 SP6
1.20.1-150600.9.2
fixed
suse enterprise desktop 15 SP7
1.20.1-150600.11.8.1
fixed
suse enterprise sap 12
1.12.1-9.1
fixed
suse enterprise sap 12 SP5
1.12.5-40.37.7
fixed
suse enterprise sap 15
1.15.2-4.25
fixed
suse enterprise sap 15 SP1
1.16.3-1.16
fixed
suse enterprise sap 15 SP2
1.16.3-3.6.1
fixed
suse enterprise sap 15 SP3
1.16.3-3.15.1
fixed
suse enterprise sap 15 SP4
1.19.2-150400.1.9
fixed
suse enterprise sap 15 SP5
1.20.1-150500.1.2
fixed
suse enterprise sap 15 SP6
1.20.1-150600.9.2
fixed
suse enterprise sap 15 SP7
1.20.1-150600.11.8.1
fixed
suse enterprise server 12
1.12.1-9.1
fixed
suse enterprise server 12 SP2
1.12.5-39.1
fixed
suse enterprise server 12 SP3
1.12.5-39.1
fixed
suse enterprise server 12 SP5
1.12.5-40.37.7
fixed
suse enterprise server 15
1.15.2-4.25
fixed
suse enterprise server 15 SP1
1.16.3-1.16
fixed
suse enterprise server 15 SP2
1.16.3-3.6.1
fixed
suse enterprise server 15 SP3
1.16.3-3.15.1
fixed
suse enterprise server 15 SP4
1.19.2-150400.1.9
fixed
suse enterprise server 15 SP5
1.20.1-150500.1.2
fixed
suse enterprise server 15 SP6
1.20.1-150600.9.2
fixed
suse enterprise server 15 SP7
1.20.1-150600.11.8.1
fixed
krb5-server
suse enterprise sap 12
1.12.1-9.1
fixed
suse enterprise sap 12 SP5
1.12.5-40.37.7
fixed
suse enterprise sap 15
1.15.2-4.25
fixed
suse enterprise sap 15 SP1
1.16.3-1.16
fixed
suse enterprise sap 15 SP2
1.16.3-3.6.1
fixed
suse enterprise sap 15 SP3
1.16.3-3.15.1
fixed
suse enterprise sap 15 SP4
1.19.2-150400.1.9
fixed
suse enterprise sap 15 SP7
1.20.1-150600.11.8.1
fixed
suse enterprise server 12
1.12.1-9.1
fixed
suse enterprise server 12 SP2
1.12.5-39.1
fixed
suse enterprise server 12 SP3
1.12.5-39.1
fixed
suse enterprise server 12 SP5
1.12.5-40.37.7
fixed
suse enterprise server 15
1.15.2-4.25
fixed
suse enterprise server 15 SP1
1.16.3-1.16
fixed
suse enterprise server 15 SP2
1.16.3-3.6.1
fixed
suse enterprise server 15 SP3
1.16.3-3.15.1
fixed
suse enterprise server 15 SP4
1.19.2-150400.1.9
fixed
suse enterprise server 15 SP7
1.20.1-150600.11.8.1
fixed
Red Hat logo
Red Hat Enterprise Linux Releases
Red Hat Product
Release
krb5-devel
RHEL 6
0:1.10.3-37.el6_6
fixed
RHEL 7
0:1.12.2-14.el7
fixed
krb5-libs
RHEL 6
0:1.10.3-37.el6_6
fixed
RHEL 7
0:1.12.2-14.el7
fixed
krb5-pkinit
RHEL 7
0:1.12.2-14.el7
fixed
krb5-pkinit-openssl
RHEL 6
0:1.10.3-37.el6_6
fixed
krb5-server
RHEL 6
0:1.10.3-37.el6_6
fixed
RHEL 7
0:1.12.2-14.el7
fixed
krb5-server-ldap
RHEL 6
0:1.10.3-37.el6_6
fixed
RHEL 7
0:1.12.2-14.el7
fixed
krb5-workstation
RHEL 6
0:1.10.3-37.el6_6
fixed
RHEL 7
0:1.12.2-14.el7
fixed
Common Weakness Enumeration
References
http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151103.html
http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151437.html
http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00011.html
http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00016.html
http://lists.opensuse.org/opensuse-updates/2015-02/msg00044.html
http://rhn.redhat.com/errata/RHSA-2015-0439.html
http://rhn.redhat.com/errata/RHSA-2015-0794.html
http://web.mit.edu/kerberos/advisories/2015-001-patch-r113.txt
http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2015-001.txt
http://www.debian.org/security/2015/dsa-3153
http://www.mandriva.com/security/advisories?name=MDVSA-2015:069
http://www.securityfocus.com/bid/72494
http://www.ubuntu.com/usn/USN-2498-1
https://github.com/krb5/krb5/commit/6609658db0799053fbef0d7d0aa2f1fd68ef32d8
http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151103.html
http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151437.html
http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00011.html
http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00016.html
http://lists.opensuse.org/opensuse-updates/2015-02/msg00044.html
http://rhn.redhat.com/errata/RHSA-2015-0439.html
http://rhn.redhat.com/errata/RHSA-2015-0794.html
http://web.mit.edu/kerberos/advisories/2015-001-patch-r113.txt
http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2015-001.txt
http://www.debian.org/security/2015/dsa-3153
http://www.mandriva.com/security/advisories?name=MDVSA-2015:069
http://www.securityfocus.com/bid/72494
http://www.ubuntu.com/usn/USN-2498-1
https://github.com/krb5/krb5/commit/6609658db0799053fbef0d7d0aa2f1fd68ef32d8