CVE-2015-2698

The iakerb_gss_export_sec_context function in lib/gssapi/krb5/iakerb.c in MIT Kerberos 5 (aka krb5) 1.14 pre-release 2015-09-14 improperly accesses a certain pointer, which allows remote authenticated users to cause a denial of service (memory corruption) or possibly have unspecified other impact by interacting with an application that calls the gss_export_sec_context function.  NOTE: this vulnerability exists because of an incorrect fix for CVE-2015-2696.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
8.5 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:S/C:C/I:C/A:C
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 80%
VendorProductVersion
mitkerberos_5
1.14:beta2
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
krb5
bullseye (security)
1.18.3-6+deb11u5
fixed
bullseye
1.18.3-6+deb11u5
fixed
jessie
not-affected
wheezy
not-affected
squeeze
not-affected
bookworm
1.20.1-2+deb12u2
fixed
bookworm (security)
1.20.1-2+deb12u2
fixed
sid
1.21.3-3
fixed
trixie
1.21.3-3
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
krb5
wily
Fixed 1.13.2+dfsg-2ubuntu0.1
released
vivid
Fixed 1.12.1+dfsg-18ubuntu0.1
released
trusty
Fixed 1.12+dfsg-2ubuntu5.2
released
precise
Fixed 1.10+dfsg~beta1-2ubuntu0.7
released
Common Weakness Enumeration
References
http://krbdev.mit.edu/rt/Ticket/Display.html?id=8273
http://lists.opensuse.org/opensuse-updates/2015-11/msg00116.html
http://lists.opensuse.org/opensuse-updates/2015-12/msg00124.html
http://www.ubuntu.com/usn/USN-2810-1
https://github.com/krb5/krb5/commit/3db8dfec1ef50ddd78d6ba9503185995876a39fd
http://krbdev.mit.edu/rt/Ticket/Display.html?id=8273
http://lists.opensuse.org/opensuse-updates/2015-11/msg00116.html
http://lists.opensuse.org/opensuse-updates/2015-12/msg00124.html
http://www.ubuntu.com/usn/USN-2810-1
https://github.com/krb5/krb5/commit/3db8dfec1ef50ddd78d6ba9503185995876a39fd