CVE-2015-2698 — Type Confusion in Kerberos 5

CWE-843 — Type ConfusionCWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer9 documents8 sources
Severity
8.5HIGHNVD
CNA7.1OSV7.1
EPSS
0.9%
top 24.82%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
MIT Krb5MIT Kerberos 5
Timeline
PublishedNov 13
Latest updateMay 13

Description

The iakerb_gss_export_sec_context function in lib/gssapi/krb5/iakerb.c in MIT Kerberos 5 (aka krb5) 1.14 pre-release 2015-09-14 improperly accesses a certain pointer, which allows remote authenticated users to cause a denial of service (memory corruption) or possibly have unspecified other impact by interacting with an application that calls the gss_export_sec_context function. NOTE: this vulnerability exists because of an incorrect fix for CVE-2015-2696.

CVSS vector

AV:N/AC:M/C:C/I:C/A:CExploitability: 6.8 | Impact: 10.0

Affected Packages2 packages

▶Debianmit/krb5< 1.13.2+dfsg-4+3
▶NVDmit/kerberos_51.14

🔴Vulnerability Details

3
GHSA
GHSA-v6gv-gg54-g3w6: The iakerb_gss_export_sec_context function in lib/gssapi/krb5/iakerb↗2022-05-13
▶
OSV
CVE-2015-2698: The iakerb_gss_export_sec_context function in lib/gssapi/krb5/iakerb↗2015-11-13
▶
CVEList
CVE-2015-2698: The iakerb_gss_export_sec_context function in lib/gssapi/krb5/iakerb↗2015-11-13
▶

📋Vendor Advisories

3
Ubuntu
Kerberos vulnerabilities↗2015-11-12
▶
Red Hat
krb5: IAKERB context export/import↗2015-11-01
▶
Debian
CVE-2015-2698: krb5 - The iakerb_gss_export_sec_context function in lib/gssapi/krb5/iakerb.c in MIT Ke...↗2015
▶

💬Community

2
Bugzilla
CVE-2015-2698 krb5: IAKERB context export/import [fedora-all]↗2015-11-06
▶
Bugzilla
CVE-2015-2698 krb5: IAKERB context export/import↗2015-11-06
▶
CVE-2015-2698 — Type Confusion in MIT Kerberos 5 | cvebase