CVE-2009-0844
published 2009-04-09CVE-2009-0844: The get_input_token function in the SPNEGO implementation in MIT Kerberos 5 (aka krb5) 1.5 through 1.6.3 allows remote attackers to cause a denial of service…
PriorityP424medium5.8CVSS 2.0
AVNACMAuNCPINAP
EPSS
4.32%
89.9th percentile
The get_input_token function in the SPNEGO implementation in MIT Kerberos 5 (aka krb5) 1.5 through 1.6.3 allows remote attackers to cause a denial of service (daemon crash) and possibly obtain sensitive information via a crafted length value that triggers a buffer over-read.
Affected
13 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | krb5 | < krb5 1.6.dfsg.4~beta1-13 (bookworm) | krb5 1.6.dfsg.4~beta1-13 (bookworm) |
| mit | kerberos | — | — |
| mit | kerberos_5 | — | — |
| mit | kerberos_5 | — | — |
| mit | kerberos_5 | — | — |
| mit | kerberos_5 | — | — |
| mit | kerberos_5 | — | — |
| mit | kerberos_5 | — | — |
| mit | kerberos_5 | — | — |
| mit | krb5 | >= 0 < 1.6.dfsg.4~beta1-13 | 1.6.dfsg.4~beta1-13 |
| mit | krb5 | >= 0 < 1.6.dfsg.4~beta1-13 | 1.6.dfsg.4~beta1-13 |
| mit | krb5 | >= 0 < 1.6.dfsg.4~beta1-13 | 1.6.dfsg.4~beta1-13 |
| mit | krb5 | >= 0 < 1.6.dfsg.4~beta1-13 | 1.6.dfsg.4~beta1-13 |
CVSS provenance
nvdv2.05.8MEDIUMAV:N/AC:M/Au:N/C:P/I:N/A:P
osv5.8MEDIUM
vendor_debian5.8MEDIUM
vendor_redhat5.8MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-4h8p-gqwx-mmw3: The get_input_token function in the SPNEGO implementation in MIT Kerberos 5 (aka krb5) 1
ghsa_unreviewed·2022-05-02
CVE-2009-0844 [MEDIUM] CWE-119 GHSA-4h8p-gqwx-mmw3: The get_input_token function in the SPNEGO implementation in MIT Kerberos 5 (aka krb5) 1
The get_input_token function in the SPNEGO implementation in MIT Kerberos 5 (aka krb5) 1.5 through 1.6.3 allows remote attackers to cause a denial of service (daemon crash) and possibly obtain sensitive information via a crafted length value that triggers a buffer over-read.
OSV
CVE-2009-0844: The get_input_token function in the SPNEGO implementation in MIT Kerberos 5 (aka krb5) 1
osv·2009-04-09·CVSS 5.8
CVE-2009-0844 [MEDIUM] CVE-2009-0844: The get_input_token function in the SPNEGO implementation in MIT Kerberos 5 (aka krb5) 1
The get_input_token function in the SPNEGO implementation in MIT Kerberos 5 (aka krb5) 1.5 through 1.6.3 allows remote attackers to cause a denial of service (daemon crash) and possibly obtain sensitive information via a crafted length value that triggers a buffer over-read.
Ubuntu
Kerberos vulnerabilities
vendor_ubuntu·2009-04-07
CVE-2009-0844 Kerberos vulnerabilities
Title: Kerberos vulnerabilities
Summary: Kerberos vulnerabilities
Multiple flaws were discovered in the Kerberos GSS-API and ASN.1 routines
that did not correctly handle certain requests. An unauthenticated remote
attacker could send specially crafted traffic to crash services using
the Kerberos library, leading to a denial of service.
Instructions: After a standard system upgrade you need to restart any services using
the Kerberos libraries to effect the necessary changes.
Red Hat
krb5: buffer over-read in SPNEGO GSS-API mechanism (MITKRB5-SA-2009-001)
vendor_redhat·2009-04-07·CVSS 5.8
CVE-2009-0844 [MEDIUM] krb5: buffer over-read in SPNEGO GSS-API mechanism (MITKRB5-SA-2009-001)
krb5: buffer over-read in SPNEGO GSS-API mechanism (MITKRB5-SA-2009-001)
The get_input_token function in the SPNEGO implementation in MIT Kerberos 5 (aka krb5) 1.5 through 1.6.3 allows remote attackers to cause a denial of service (daemon crash) and possibly obtain sensitive information via a crafted length value that triggers a buffer over-read.
Debian
CVE-2009-0844: krb5 - The get_input_token function in the SPNEGO implementation in MIT Kerberos 5 (aka...
vendor_debian·2009·CVSS 5.8
CVE-2009-0844 [MEDIUM] CVE-2009-0844: krb5 - The get_input_token function in the SPNEGO implementation in MIT Kerberos 5 (aka...
The get_input_token function in the SPNEGO implementation in MIT Kerberos 5 (aka krb5) 1.5 through 1.6.3 allows remote attackers to cause a denial of service (daemon crash) and possibly obtain sensitive information via a crafted length value that triggers a buffer over-read.
Scope: local
bookworm: resolved (fixed in 1.6.dfsg.4~beta1-13)
bullseye: resolved (fixed in 1.6.dfsg.4~beta1-13)
forky: resolved (fixed in 1.6.dfsg.4~beta1-13)
sid: resolved (fixed in 1.6.dfsg.4~beta1-13)
trixie: resolved (fixed in 1.6.dfsg.4~beta1-13)
No detection rules found.
No public exploits indexed.
http://lists.apple.com/archives/security-announce/2009/May/msg00002.htmlhttp://secunia.com/advisories/34594http://secunia.com/advisories/34617http://secunia.com/advisories/34622http://secunia.com/advisories/34628http://secunia.com/advisories/34630http://secunia.com/advisories/34637http://secunia.com/advisories/34640http://secunia.com/advisories/34734http://secunia.com/advisories/35074http://security.gentoo.org/glsa/glsa-200904-09.xmlhttp://sunsolve.sun.com/search/document.do?assetkey=1-26-256728-1http://support.apple.com/kb/HT3549http://support.avaya.com/elmodocs2/security/ASA-2009-142.htmhttp://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5047180.htmlhttp://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5047181.htmlhttp://web.mit.edu/kerberos/advisories/MITKRB5-SA-2009-001.txthttp://wiki.rpath.com/Advisories:rPSA-2009-0058http://wiki.rpath.com/wiki/Advisories:rPSA-2009-0058http://www-01.ibm.com/support/docview.wss?uid=swg21396120http://www.kb.cert.org/vuls/id/662091http://www.mandriva.com/security/advisories?name=MDVSA-2009:098http://www.redhat.com/support/errata/RHSA-2009-0408.htmlhttp://www.securityfocus.com/archive/1/502526/100/0/threadedhttp://www.securityfocus.com/archive/1/502546/100/0/threadedhttp://www.securityfocus.com/bid/34408http://www.securitytracker.com/id?1021867http://www.ubuntu.com/usn/usn-755-1http://www.us-cert.gov/cas/techalerts/TA09-133A.htmlhttp://www.vupen.com/english/advisories/2009/0960http://www.vupen.com/english/advisories/2009/0976http://www.vupen.com/english/advisories/2009/1057http://www.vupen.com/english/advisories/2009/1106http://www.vupen.com/english/advisories/2009/1297http://www.vupen.com/english/advisories/2009/2248https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6339https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9474https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00205.htmlhttps://www.redhat.com/archives/fedora-package-announce/2009-April/msg00206.htmlhttp://lists.apple.com/archives/security-announce/2009/May/msg00002.htmlhttp://secunia.com/advisories/34594http://secunia.com/advisories/34617http://secunia.com/advisories/34622http://secunia.com/advisories/34628http://secunia.com/advisories/34630http://secunia.com/advisories/34637http://secunia.com/advisories/34640http://secunia.com/advisories/34734http://secunia.com/advisories/35074http://security.gentoo.org/glsa/glsa-200904-09.xmlhttp://sunsolve.sun.com/search/document.do?assetkey=1-26-256728-1http://support.apple.com/kb/HT3549http://support.avaya.com/elmodocs2/security/ASA-2009-142.htmhttp://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5047180.htmlhttp://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5047181.htmlhttp://web.mit.edu/kerberos/advisories/MITKRB5-SA-2009-001.txthttp://wiki.rpath.com/Advisories:rPSA-2009-0058http://wiki.rpath.com/wiki/Advisories:rPSA-2009-0058http://www-01.ibm.com/support/docview.wss?uid=swg21396120http://www.kb.cert.org/vuls/id/662091http://www.mandriva.com/security/advisories?name=MDVSA-2009:098http://www.redhat.com/support/errata/RHSA-2009-0408.htmlhttp://www.securityfocus.com/archive/1/502526/100/0/threadedhttp://www.securityfocus.com/archive/1/502546/100/0/threadedhttp://www.securityfocus.com/bid/34408http://www.securitytracker.com/id?1021867http://www.ubuntu.com/usn/usn-755-1http://www.us-cert.gov/cas/techalerts/TA09-133A.htmlhttp://www.vupen.com/english/advisories/2009/0960http://www.vupen.com/english/advisories/2009/0976http://www.vupen.com/english/advisories/2009/1057http://www.vupen.com/english/advisories/2009/1106http://www.vupen.com/english/advisories/2009/1297http://www.vupen.com/english/advisories/2009/2248https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6339https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9474https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00205.htmlhttps://www.redhat.com/archives/fedora-package-announce/2009-April/msg00206.html
2009-04-09
Published