Executive Summary

Informations
Name CVE-2014-4344 First vendor Publication 2014-08-14
Vendor Cve Last vendor Modification 2024-11-21

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score NA
Base Score NA Environmental Score NA
impact SubScore NA Temporal Score NA
Exploitabality Sub Score NA
 
Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:L/Au:N/C:N/I:N/A:C)
Cvss Base Score 7.8 Attack Range Network
Cvss Impact Score 6.9 Attack Complexity Low
Cvss Expoit Score 10 Authentication None Required
Calculate full CVSS 2.0 Vectors scores

Detail

The acc_ctx_cont function in the SPNEGO acceptor in lib/gssapi/spnego/spnego_mech.c in MIT Kerberos 5 (aka krb5) 1.5.x through 1.12.x before 1.12.2 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via an empty continuation token at a certain point during a SPNEGO negotiation.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4344

CWE : Common Weakness Enumeration

% Id Name
100 % CWE-476 NULL Pointer Dereference

OVAL Definitions

Definition Id: oval:org.mitre.oval:def:26722
 
Oval ID: oval:org.mitre.oval:def:26722
Title: AIX NAS null deref in SPNEGO acceptor
Description: The acc_ctx_cont function in the SPNEGO acceptor in lib/gssapi/spnego/spnego_mech.c in MIT Kerberos 5 (aka krb5) 1.5.x through 1.12.x before 1.12.2 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via an empty continuation token at a certain point during a SPNEGO negotiation.
Family: unix Class: vulnerability
Reference(s): CVE-2014-4344
 Version: 4
Platform(s): IBM AIX 6.1
IBM AIX 7.1
 Product(s):
Definition Synopsis:
Definition Id: oval:org.mitre.oval:def:26777
 
Oval ID: oval:org.mitre.oval:def:26777
Title: RHSA-2014:1245: krb5 security and bug fix update (Moderate)
Description: Kerberos is an authentication system which allows clients and services to authenticate to each other with the help of a trusted third party, a Kerberos Key Distribution Center (KDC). It was found that if a KDC served multiple realms, certain requests could cause the setup_server_realm() function to dereference a NULL pointer. A remote, unauthenticated attacker could use this flaw to crash the KDC using a specially crafted request. (CVE-2013-1418, CVE-2013-6800) A NULL pointer dereference flaw was found in the MIT Kerberos SPNEGO acceptor for continuation tokens. A remote, unauthenticated attacker could use this flaw to crash a GSSAPI-enabled server application. (CVE-2014-4344) A buffer over-read flaw was found in the way MIT Kerberos handled certain requests. A man-in-the-middle attacker with a valid Kerberos ticket who is able to inject packets into a client or server application's GSSAPI session could use this flaw to crash the application. (CVE-2014-4341) This update also fixes the following bugs: * Prior to this update, the libkrb5 library occasionally attempted to free already freed memory when encrypting credentials. As a consequence, the calling process terminated unexpectedly with a segmentation fault. With this update, libkrb5 frees memory correctly, which allows the credentials to be encrypted appropriately and thus prevents the mentioned crash. (BZ#1004632) * Previously, when the krb5 client library was waiting for a response from a server, the timeout variable in certain cases became a negative number. Consequently, the client could enter a loop while checking for responses. With this update, the client logic has been modified and the described error no longer occurs. (BZ#1089732) All krb5 users are advised to upgrade to these updated packages, which contain backported patches to correct these issues. After installing the updated packages, the krb5kdc daemon will be restarted automatically.
Family: unix Class: patch
Reference(s): RHSA-2014:1245-00
CVE-2013-1418
CVE-2013-6800
CVE-2014-4341
CVE-2014-4344
CESA-2014:1245
 Version: 5
Platform(s): Red Hat Enterprise Linux 5
CentOS Linux 5
 Product(s): krb5
Definition Synopsis:
Definition Id: oval:org.mitre.oval:def:26809
 
Oval ID: oval:org.mitre.oval:def:26809
Title: SUSE-SU-2014:0989-1 -- Security update for krb5
Description: The several security issues have been fixed in kerberos 5.
Family: unix Class: patch
Reference(s): SUSE-SU-2014:0989-1
CVE-2014-4341
CVE-2014-4342
CVE-2014-4343
CVE-2014-4344
 Version: 3
Platform(s): SUSE Linux Enterprise Server 11
SUSE Linux Enterprise Desktop 11
 Product(s): krb5
Definition Synopsis:
Definition Id: oval:org.mitre.oval:def:27019
 
Oval ID: oval:org.mitre.oval:def:27019
Title: DEPRECATED: SUSE-SU-2014:0989-1 -- Security update for krb5
Description: The several security issues have been fixed in kerberos 5.
Family: unix Class: patch
Reference(s): SUSE-SU-2014:0989-1
CVE-2014-4341
CVE-2014-4342
CVE-2014-4343
CVE-2014-4344
 Version: 4
Platform(s): SUSE Linux Enterprise Server 11
SUSE Linux Enterprise Desktop 11
 Product(s): krb5
Definition Synopsis:

CPE : Common Platform Enumeration

TypeDescriptionCount
Application 13
Os 1
Os 1
Os 1
Os 1
Os 1

Snort® IPS/IDS

Date Description
2016-03-14 MIT Kerberos 5 IAKERB outbound token detected
RuleID : 36816 - Revision : 5 - Type : SERVER-OTHER
2016-03-14 MIT Kerberos 5 SPNEGO incoming token detected
RuleID : 36815 - Revision : 5 - Type : SERVER-OTHER
2016-03-14 MIT Kerberos 5 SPNEGO acceptor acc_ctx_cont denial of service attempt
RuleID : 36814 - Revision : 5 - Type : SERVER-OTHER

Nessus® Vulnerability Scanner

Date Description
2015-03-26 Name : The remote Scientific Linux host is missing one or more security updates.
File : sl_20150305_krb5_on_SL7_x.nasl - Type : ACT_GATHER_INFO
2015-03-26 Name : The remote Debian host is missing a security update.
File : debian_DLA-37.nasl - Type : ACT_GATHER_INFO
2015-03-18 Name : The remote CentOS host is missing one or more security updates.
File : centos_RHSA-2015-0439.nasl - Type : ACT_GATHER_INFO
2015-03-13 Name : The remote Oracle Linux host is missing one or more security updates.
File : oraclelinux_ELSA-2015-0439.nasl - Type : ACT_GATHER_INFO
2015-03-05 Name : The remote Red Hat host is missing one or more security updates.
File : redhat-RHSA-2015-0439.nasl - Type : ACT_GATHER_INFO
2015-02-26 Name : The remote FreeBSD host is missing a security-related update.
File : freebsd_pkg_dbf9e66cbd5011e4a7ba206a8a720317.nasl - Type : ACT_GATHER_INFO
2014-11-26 Name : The remote OracleVM host is missing a security update.
File : oraclevm_OVMSA-2014-0034.nasl - Type : ACT_GATHER_INFO
2014-11-18 Name : The remote Amazon Linux AMI host is missing a security update.
File : ala_ALAS-2014-443.nasl - Type : ACT_GATHER_INFO
2014-11-12 Name : The remote CentOS host is missing one or more security updates.
File : centos_RHSA-2014-1389.nasl - Type : ACT_GATHER_INFO
2014-11-04 Name : The remote Scientific Linux host is missing one or more security updates.
File : sl_20141014_krb5_on_SL6_x.nasl - Type : ACT_GATHER_INFO
2014-10-17 Name : The remote Oracle Linux host is missing one or more security updates.
File : oraclelinux_ELSA-2014-1389.nasl - Type : ACT_GATHER_INFO
2014-10-14 Name : The remote Scientific Linux host is missing one or more security updates.
File : sl_20140916_krb5_on_SL5_x.nasl - Type : ACT_GATHER_INFO
2014-10-14 Name : The remote Red Hat host is missing one or more security updates.
File : redhat-RHSA-2014-1389.nasl - Type : ACT_GATHER_INFO
2014-10-01 Name : The remote CentOS host is missing one or more security updates.
File : centos_RHSA-2014-1245.nasl - Type : ACT_GATHER_INFO
2014-09-18 Name : The remote Oracle Linux host is missing one or more security updates.
File : oraclelinux_ELSA-2014-1245.nasl - Type : ACT_GATHER_INFO
2014-09-16 Name : The remote Red Hat host is missing one or more security updates.
File : redhat-RHSA-2014-1245.nasl - Type : ACT_GATHER_INFO
2014-09-12 Name : The remote Mandriva Linux host is missing one or more security updates.
File : mandriva_MDVSA-2014-165.nasl - Type : ACT_GATHER_INFO
2014-09-04 Name : The remote AIX host has a version of NAS installed that is affected by multip...
File : aix_nas_advisory1.nasl - Type : ACT_GATHER_INFO
2014-08-12 Name : The remote Ubuntu host is missing one or more security-related patches.
File : ubuntu_USN-2310-1.nasl - Type : ACT_GATHER_INFO
2014-08-12 Name : The remote SuSE 11 host is missing one or more security updates.
File : suse_11_krb5-140729.nasl - Type : ACT_GATHER_INFO
2014-08-12 Name : The remote openSUSE host is missing a security update.
File : openSUSE-2014-486.nasl - Type : ACT_GATHER_INFO
2014-08-10 Name : The remote Debian host is missing a security-related update.
File : debian_DSA-3000.nasl - Type : ACT_GATHER_INFO
2014-08-08 Name : The remote Fedora host is missing a security update.
File : fedora_2014-8176.nasl - Type : ACT_GATHER_INFO
2014-08-08 Name : The remote Fedora host is missing a security update.
File : fedora_2014-8189.nasl - Type : ACT_GATHER_INFO

Sources (Detail)

http://advisories.mageia.org/MGASA-2014-0345.html
http://aix.software.ibm.com/aix/efixes/security/nas_advisory1.asc
http://krbdev.mit.edu/rt/Ticket/Display.html?id=7970
http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136360....
http://rhn.redhat.com/errata/RHSA-2015-0439.html
http://secunia.com/advisories/59102
http://secunia.com/advisories/60082
http://secunia.com/advisories/60448
http://secunia.com/advisories/61051
http://support.f5.com/kb/en-us/solutions/public/15000/500/sol15561.html
http://www.debian.org/security/2014/dsa-3000
http://www.mandriva.com/security/advisories?name=MDVSA-2014:165
http://www.osvdb.org/109389
http://www.securityfocus.com/bid/69160
http://www.securitytracker.com/id/1030706
https://bugzilla.redhat.com/show_bug.cgi?id=1121877
https://exchange.xforce.ibmcloud.com/vulnerabilities/95210
https://github.com/krb5/krb5/commit/524688ce87a15fc75f87efc8c039ba4c7d5c197b
https://github.com/krb5/krb5/commit/a7886f0ed1277c69142b14a2c6629175a6331edc
Source Url

Alert History

If you want to see full details history, please login or register.
0
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
Date Informations
2024-11-28 12:41:24
  • Multiple Updates
2021-05-04 12:32:45
  • Multiple Updates
2021-04-22 01:39:52
  • Multiple Updates
2020-05-23 00:41:25
  • Multiple Updates
2017-08-29 09:24:37
  • Multiple Updates
2017-01-07 09:25:39
  • Multiple Updates
2016-08-27 00:24:33
  • Multiple Updates
2016-04-27 00:58:52
  • Multiple Updates
2015-03-27 13:28:24
  • Multiple Updates
2015-03-19 13:28:07
  • Multiple Updates
2015-03-14 13:25:31
  • Multiple Updates
2015-03-12 09:23:29
  • Multiple Updates
2015-03-06 13:25:50
  • Multiple Updates
2015-02-27 13:24:23
  • Multiple Updates
2014-11-27 13:28:33
  • Multiple Updates
2014-11-19 13:25:13
  • Multiple Updates
2014-11-13 13:27:06
  • Multiple Updates
2014-11-05 13:27:57
  • Multiple Updates
2014-10-18 13:26:04
  • Multiple Updates
2014-10-17 13:26:36
  • Multiple Updates
2014-10-16 13:25:32
  • Multiple Updates
2014-10-02 13:27:16
  • Multiple Updates
2014-09-19 13:27:37
  • Multiple Updates
2014-09-17 13:25:48
  • Multiple Updates
2014-09-13 13:43:08
  • Multiple Updates
2014-09-05 13:24:19
  • Multiple Updates
2014-08-15 00:23:25
  • Multiple Updates
2014-08-14 21:28:24
  • Multiple Updates
2014-08-14 17:21:53
  • First insertion