Security Update for krb5
Summary
DSA-3395-1: krb5 - security update. Affects krb5 versions < 1.10.1+dfsg-5+deb7u4. Fixed in 1.10.1+dfsg-5+deb7u4. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
krb5 is the MIT implementation of Kerberos, a network authentication protocol. It provides secure authentication for client-server applications by using secret-key cryptography. The vulnerability described in this report affects the krb5 package.
Vulnerability Detail
The vulnerability, identified as CVE-2015-2695, allows applications that call gss_inquire_context() on a partially-established SPNEGO context to cause the GSS-API library to read from a pointer using the wrong type, leading to a process crash. Another vulnerability, CVE-2015-2696, affects applications that call gss_inquire_context() on a partially-established IAKERB context, causing a similar process crash. Additionally, CVE-2015-2697 highlights a flaw in the build_principal_va() function, which mishandles input strings. An authenticated attacker can exploit this flaw to crash a KDC using a TGS request with a large realm field beginning with a null byte.
How To Fix
Minimum fixed version
1.10.1+dfsg-5+deb7u4
This is the first release that contains the fix.
sudo apt-get install --only-upgrade krb5Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Conclusion
Upgrading the krb5 package to the fixed versions mentioned in this report will address the identified vulnerabilities. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for krb5 →
FAQ
krb5 is the MIT implementation of Kerberos, a network authentication protocol.
CVE-2015-2695 can cause a process crash when applications call gss_inquire_context() on a partially-established SPNEGO context.
CVE-2015-2696 can cause a process crash when applications call gss_inquire_context() on a partially-established IAKERB context.
CVE-2015-2697 allows an authenticated attacker to crash a KDC by exploiting a flaw in the build_principal_va() function.
To fix these vulnerabilities, upgrade the krb5 package to the respective fixed versions.
Related vulnerabilities
Recent vulnerabilities recorded for krb5.
