Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveMitreCVE-2014-4343
HistoryAug 14, 2014 - 5:01 a.m.

CVE-2014-4343

2014-08-1405:01:49
CWE-415
mitre
web.nvd.nist.gov
68
cve-2014-4343
double free vulnerability
spnego initiator
mit kerberos 5
remote attackers
denial of service
memory corruption
arbitrary code
network traffic
security mechanism

CVSS2

7.6

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:H/Au:N/C:C/I:C/A:C

AI Score

7.8

Confidence

Low

EPSS

0.033

Percentile

91.3%

JSON

Double free vulnerability in the init_ctx_reselect function in the SPNEGO initiator in lib/gssapi/spnego/spnego_mech.c in MIT Kerberos 5 (aka krb5) 1.10.x through 1.12.x before 1.12.2 allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via network traffic that appears to come from an intended acceptor, but specifies a security mechanism different from the one proposed by the initiator.

Affected configurations

Nvd
Node
debiandebian_linuxMatch7.0
Node
mitkerberos_5Match1.10
OR
mitkerberos_5Match1.10.1
OR
mitkerberos_5Match1.10.2
OR
mitkerberos_5Match1.10.3
OR
mitkerberos_5Match1.10.4
OR
mitkerberos_5Match1.11
OR
mitkerberos_5Match1.11.1
OR
mitkerberos_5Match1.11.2
OR
mitkerberos_5Match1.11.3
OR
mitkerberos_5Match1.11.4
OR
mitkerberos_5Match1.11.5
OR
mitkerberos_5Match1.12
OR
mitkerberos_5Match1.12.1
Node
redhatenterprise_linux_desktopMatch7.0
OR
redhatenterprise_linux_hpc_nodeMatch7.0
OR
redhatenterprise_linux_serverMatch7.0
OR
redhatenterprise_linux_workstationMatch7.0
VendorProductVersionCPE
debiandebian_linux7.0cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*
mitkerberos_51.10cpe:2.3:a:mit:kerberos_5:1.10:*:*:*:*:*:*:*
mitkerberos_51.10.1cpe:2.3:a:mit:kerberos_5:1.10.1:*:*:*:*:*:*:*
mitkerberos_51.10.2cpe:2.3:a:mit:kerberos_5:1.10.2:*:*:*:*:*:*:*
mitkerberos_51.10.3cpe:2.3:a:mit:kerberos_5:1.10.3:*:*:*:*:*:*:*
mitkerberos_51.10.4cpe:2.3:a:mit:kerberos_5:1.10.4:*:*:*:*:*:*:*
mitkerberos_51.11cpe:2.3:a:mit:kerberos_5:1.11:*:*:*:*:*:*:*
mitkerberos_51.11.1cpe:2.3:a:mit:kerberos_5:1.11.1:*:*:*:*:*:*:*
mitkerberos_51.11.2cpe:2.3:a:mit:kerberos_5:1.11.2:*:*:*:*:*:*:*
mitkerberos_51.11.3cpe:2.3:a:mit:kerberos_5:1.11.3:*:*:*:*:*:*:*
Rows per page:
1-10 of 181

Related

nessus 21
debiancve 1
ubuntucve 1
f5 2
veracode 1
nvd 1
cvelist 1
prion 1
aix 1
openvas 17
gentoo 1
debian 3
osv 2
mageia 1
fedora 5
amazon 1
redhat 2
centos 2
oraclelinux 2
ibm 1
freebsd 1
ubuntu 1
nessus
nessus
F5 Networks BIG-IP : Kerberos vulnerability (K15553)
2014-10-10 00:00:00
AIX NAS Advisory : nas_advisory1.asc
2014-09-04 00:00:00
openSUSE Security Update : krb5 (openSUSE-SU-2014:0977-1)
2014-08-12 00:00:00
debiancve
debiancve
CVE-2014-4343
2014-08-14 05:01:49
ubuntucve
ubuntucve
CVE-2014-4343
2014-07-21 00:00:00
f5
f5
SOL15553 - Kerberos vulnerability CVE-2014-4343
2014-09-04 00:00:00
K15553 : Kerberos vulnerability CVE-2014-4343
2014-09-04 00:00:00
veracode
veracode
Arbitrary Code Execution
2019-05-02 05:12:23
nvd
nvd
CVE-2014-4343
2014-08-14 05:01:49
cvelist
cvelist
CVE-2014-4343
2014-08-14 01:00:00
prion
prion
Double free
2014-08-14 05:01:00
aix
aix
Multiple Security vulnerabilities in IBM NAS
2014-08-28 03:15:00
openvas
openvas
Gentoo Security Advisory GLSA 201412-53
2015-09-29 00:00:00
SUSE: Security Advisory (SUSE-SU-2014:0989-1)
2021-06-09 00:00:00
Debian Security Advisory DSA 3000-1 (krb5 - security update)
2014-08-09 00:00:00
gentoo
gentoo
MIT Kerberos 5: User-assisted execution of arbitrary code
2014-12-31 00:00:00
debian
debian
[SECURITY] [DSA 3000-1] krb5 security update
2014-08-09 14:54:58
[DLA 37-1] krb5 security update
2014-08-18 17:42:53
[SECURITY] [DSA 3000-1] krb5 security update
2014-08-09 14:54:58
osv
osv
krb5 - security update
2014-08-09 00:00:00
krb5 - security update
2014-08-18 00:00:00
mageia
mageia
Updated krb5 package fixes security vulnerabilities
2014-08-22 14:58:14
fedora
fedora
[SECURITY] Fedora 20 Update: krb5-1.11.5-10.fc20
2014-08-07 15:32:53
[SECURITY] Fedora 19 Update: krb5-1.11.3-24.fc19
2014-08-07 15:27:20
[SECURITY] Fedora 20 Update: krb5-1.11.5-11.fc20
2014-08-15 02:45:53
amazon
amazon
Medium: krb5
2014-11-11 10:25:00
redhat
redhat
(RHSA-2014:1389) Moderate: krb5 security and bug fix update
2014-10-14 00:00:00
(RHSA-2015:0439) Moderate: krb5 security, bug fix and enhancement update
2015-03-05 00:00:00
centos
centos
krb5 security update
2014-10-20 18:09:24
krb5 security update
2015-03-17 13:28:30
oraclelinux
oraclelinux
krb5 security and bug fix update
2014-10-15 00:00:00
krb5 security, bug fix and enhancement update
2015-03-11 00:00:00
ibm
ibm
Security Bulletin: Power Hardware Management Console is affected by security vulnerabilities in Kerberos (CVE-2014-4341, CVE-2014-4342, CVE-2014-4343, CVE-2014-5352, CVE-2014-9421, CVE-2014-9422, CVE-2014-9423)
2021-09-23 01:31:39
freebsd
freebsd
krb5 1.11 -- New release/fix multiple vulnerabilities
2015-02-25 00:00:00
ubuntu
ubuntu
Kerberos vulnerabilities
2014-08-11 00:00:00

CVSS2

7.6

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:H/Au:N/C:C/I:C/A:C

AI Score

7.8

Confidence

Low

EPSS

0.033

Percentile

91.3%

JSON
Related for CVE-2014-4343
nessus21debiancve1ubuntucve1f52veracode1nvd1cvelist1prion1aix1openvas17gentoo1debian3osv2mageia1fedora5amazon1redhat2centos2oraclelinux2ibm1freebsd1ubuntu1