Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
gentooGentoo FoundationGLSA-201412-53
HistoryDec 31, 2014 - 12:00 a.m.

MIT Kerberos 5: User-assisted execution of arbitrary code

2014-12-3100:00:00
Gentoo Foundation
security.gentoo.org
18

CVSS2

8.5

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:S/C:C/I:C/A:C

EPSS

0.047

Percentile

92.7%

JSON

Background

MIT Kerberos 5 is a suite of applications that implement the Kerberos network protocol.

Description

Multiple vulnerabilities have been discovered in MIT Kerberos 5. Please review the CVE identifiers referenced below for details.

Impact

A remote attacker could execute arbitrary code with the privileges of the process or cause Denial of Service.

Workaround

There is no known workaround at this time.

Resolution

All MIT Kerberos 5 users should upgrade to the latest version:

 # emerge --sync
 # emerge --ask --oneshot --verbose ">=app-crypt/mit-krb5-1.13"
OSVersionArchitecturePackageVersionFilename
Gentooanyallapp-crypt/mit-krb5< 1.13UNKNOWN

Related

openvas 33
nessus 49
debian 4
osv 3
mageia 2
aix 2
fedora 6
centos 4
oraclelinux 4
amazon 1
redhat 4
f5 6
nvd 4
prion 4
ubuntucve 5
cvelist 4
cve 4
securityvulns 4
debiancve 4
altlinux 3
veracode 5
suse 3
freebsd 1
ubuntu 2
ibm 3
oracle 1
openvas
openvas
Gentoo Security Advisory GLSA 201412-53
2015-09-29 00:00:00
Debian Security Advisory DSA 3000-1 (krb5 - security update)
2014-08-09 00:00:00
Debian: Security Advisory (DLA-37-1)
2023-03-08 00:00:00
nessus
nessus
GLSA-201412-53 : MIT Kerberos 5: User-assisted execution of arbitrary code
2015-01-02 00:00:00
Debian DLA-37-1 : krb5 security update
2015-03-26 00:00:00
Debian DSA-3000-1 : krb5 - security update
2014-08-10 00:00:00
debian
debian
[SECURITY] [DSA 3000-1] krb5 security update
2014-08-09 14:54:58
[SECURITY] [DSA 3000-1] krb5 security update
2014-08-09 14:54:58
[DLA 37-1] krb5 security update
2014-08-18 17:42:53
osv
osv
krb5 - security update
2014-08-18 00:00:00
krb5 - security update
2014-08-09 00:00:00
krb5 - security update
2018-01-31 00:00:00
mageia
mageia
Updated krb5 package fixes security vulnerabilities
2014-08-22 14:58:14
Updated krb5 packages fix security vulnerability
2014-11-21 15:44:16
aix
aix
Multiple Security vulnerabilities in IBM NAS
2014-08-28 03:15:00
AIX NAS vulnerability
2015-01-20 04:42:45
fedora
fedora
[SECURITY] Fedora 20 Update: krb5-1.11.5-11.fc20
2014-08-15 02:45:53
[SECURITY] Fedora 19 Update: krb5-1.11.3-25.fc19
2014-08-27 01:34:45
[SECURITY] Fedora 21 Update: krb5-1.12.2-9.fc21
2014-10-08 19:01:55
centos
centos
krb5 security update
2014-10-20 18:09:24
krb5 security update
2014-10-10 21:45:06
krb5 security update
2015-03-17 13:28:30
oraclelinux
oraclelinux
krb5 security and bug fix update
2014-10-15 00:00:00
krb5 security update
2014-09-17 00:00:00
krb5 security, bug fix and enhancement update
2015-03-11 00:00:00
amazon
amazon
Medium: krb5
2014-11-11 10:25:00
redhat
redhat
(RHSA-2014:1389) Moderate: krb5 security and bug fix update
2014-10-14 00:00:00
(RHSA-2014:1255) Moderate: krb5 security update
2014-09-17 00:00:00
(RHSA-2015:0439) Moderate: krb5 security, bug fix and enhancement update
2015-03-05 00:00:00
f5
f5
K15552 : MIT Kerberos 5 vulnerability CVE-2014-4341
2015-11-10 00:00:00
SOL15552 - MIT Kerberos 5 vulnerability CVE-2014-4341
2014-09-04 00:00:00
K15566 : Kerberos vulnerability CVE-2014-4345
2014-09-11 00:00:00
nvd
nvd
CVE-2014-4341
2014-07-20 11:12:50
CVE-2014-5351
2014-10-10 01:55:11
CVE-2014-4345
2014-08-14 05:01:50
prion
prion
Design/Logic Flaw
2014-07-20 11:12:00
Cross site request forgery (csrf)
2014-10-10 01:55:00
Buffer overflow
2014-08-14 05:01:00
ubuntucve
ubuntucve
CVE-2014-4341
2014-07-20 00:00:00
CVE-2014-5351
2014-10-09 00:00:00
CVE-2014-4345
2014-08-08 00:00:00
cvelist
cvelist
CVE-2014-4341
2014-07-20 10:00:00
CVE-2014-5351
2014-10-10 01:00:00
CVE-2014-4345
2014-08-14 01:00:00
cve
cve
CVE-2014-4341
2014-07-20 11:12:50
CVE-2014-5351
2014-10-10 01:55:11
CVE-2014-4345
2014-08-14 05:01:50
securityvulns
securityvulns
MIT krb5 privilege escalation
2014-11-24 00:00:00
MITKRB5-SA-2014-001 Buffer overrun in kadmind with LDAP backend
2014-08-26 00:00:00
[ MDVSA-2014:224 ] krb5
2014-11-24 00:00:00
debiancve
debiancve
CVE-2014-4341
2014-07-20 11:12:50
CVE-2014-5351
2014-10-10 01:55:11
CVE-2014-4343
2014-08-14 05:01:49
altlinux
altlinux
Security fix for the ALT Linux 7 package krb5 version 1.13-alt1
2014-10-31 00:00:00
Security fix for the ALT Linux 8 package krb5 version 1.13-alt1
2014-10-31 00:00:00
Security fix for the ALT Linux 9 package krb5 version 1.13-alt1
2014-10-31 00:00:00
veracode
veracode
Denial Of Service (DoS)
2018-08-13 07:19:01
Denial Of Service (DoS)
2019-01-15 09:01:27
Arbitrary Code Execution
2019-05-02 05:12:23
suse
suse
Security update for krb5 (important)
2014-08-16 01:04:22
Security update for krb5 (important)
2015-02-16 14:05:49
Security update for krb5 (important)
2015-02-16 15:04:57
freebsd
freebsd
krb5 1.11 -- New release/fix multiple vulnerabilities
2015-02-25 00:00:00
ubuntu
ubuntu
Kerberos vulnerabilities
2014-08-11 00:00:00
Kerberos vulnerabilities
2015-02-10 00:00:00
ibm
ibm
Security Bulletin: IBM Security Network Intrusion Prevention System is affected by krb5 vulnerabilities (CVE-2014-4341, CVE-2013-1418 )
2022-02-23 19:48:26
Security Bulletin: Power Hardware Management Console is affected by security vulnerabilities in Kerberos (CVE-2014-4341, CVE-2014-4342, CVE-2014-4343, CVE-2014-5352, CVE-2014-9421, CVE-2014-9422, CVE-2014-9423)
2021-09-23 01:31:39
Security Bulletin: Vulnerabilities affect IBM's Advanced Management Module (AMM)
2023-04-14 14:32:25
oracle
oracle
Oracle Critical Patch Update - October 2017
2017-10-17 00:00:00

CVSS2

8.5

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:S/C:C/I:C/A:C

EPSS

0.047

Percentile

92.7%

JSON
Related for GLSA-201412-53
openvas33nessus49debian4osv3mageia2aix2fedora6centos4oraclelinux4amazon1redhat4f56nvd4prion4ubuntucve5cvelist4cve4securityvulns4debiancve4altlinux3veracode5suse3freebsd1ubuntu2ibm3oracle1