krb5 is vulnerable to denial of service (DoS). The vulnerability exists through a buffer overread issue when injected with invalid tokens into the GSSAPI application session.
advisories.mageia.org/MGASA-2014-0345.html
krbdev.mit.edu/rt/Ticket/Display.html?id=7949
rhn.redhat.com/errata/RHSA-2015-0439.html
secunia.com/advisories/59102
secunia.com/advisories/60082
www.debian.org/security/2014/dsa-3000
www.mandriva.com/security/advisories?name=MDVSA-2014:165
www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html
www.securityfocus.com/bid/68908
www.securitytracker.com/id/1030706
access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/6/html/6.6_Technical_Notes/krb5.html#RHSA-2014-1389
access.redhat.com/security/updates/classification/#moderate
bugzilla.redhat.com/show_bug.cgi?id=1001961
bugzilla.redhat.com/show_bug.cgi?id=1009389
bugzilla.redhat.com/show_bug.cgi?id=1059730
bugzilla.redhat.com/show_bug.cgi?id=1087068
bugzilla.redhat.com/show_bug.cgi?id=1113652
exchange.xforce.ibmcloud.com/vulnerabilities/94903
github.com/krb5/krb5/commit/e6ae703ae597d798e310368d52b8f38ee11c6a73
rhn.redhat.com/errata/RHSA-2014-1389.html