Skip to content
OpenAdvisories
Unscored RHSA-2014:1255 1 CVE

Red Hat Security Advisory: krb5 security update

Published Sep 15, 2024 · Updated Jun 26, 2026

Ecosystem: Red Hat

Fixed packages 16

ReleasePackageFixed in
Red Hat · RHEL 5 enterprise_linux:5::client krb5 0:1.6.1-80.el5_11
Red Hat · RHEL 5 enterprise_linux:5::client krb5-debuginfo 0:1.6.1-80.el5_11
Red Hat · RHEL 5 enterprise_linux:5::client krb5-libs 0:1.6.1-80.el5_11
Red Hat · RHEL 5 enterprise_linux:5::client krb5-workstation 0:1.6.1-80.el5_11
Red Hat · RHEL 5 enterprise_linux:5::client_workstation krb5 0:1.6.1-80.el5_11
Red Hat · RHEL 5 enterprise_linux:5::client_workstation krb5-debuginfo 0:1.6.1-80.el5_11
Red Hat · RHEL 5 enterprise_linux:5::client_workstation krb5-devel 0:1.6.1-80.el5_11
Red Hat · RHEL 5 enterprise_linux:5::client_workstation krb5-server 0:1.6.1-80.el5_11
Red Hat · RHEL 5 enterprise_linux:5::client_workstation krb5-server-ldap 0:1.6.1-80.el5_11
Red Hat · RHEL 5 enterprise_linux:5::server krb5 0:1.6.1-80.el5_11
Red Hat · RHEL 5 enterprise_linux:5::server krb5-debuginfo 0:1.6.1-80.el5_11
Red Hat · RHEL 5 enterprise_linux:5::server krb5-devel 0:1.6.1-80.el5_11
Red Hat · RHEL 5 enterprise_linux:5::server krb5-libs 0:1.6.1-80.el5_11
Red Hat · RHEL 5 enterprise_linux:5::server krb5-server 0:1.6.1-80.el5_11
Red Hat · RHEL 5 enterprise_linux:5::server krb5-server-ldap 0:1.6.1-80.el5_11
Red Hat · RHEL 5 enterprise_linux:5::server krb5-workstation 0:1.6.1-80.el5_11

Vulnerabilities 1

  • Unscored —
    CVE-2014-4345

    Off-by-one error in the krb5_encode_krbsecretkey function in plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c in the LDAP…

    krb5 krb5 Debian Ubuntu

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1128157
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_1255.json
  • report
    https://access.redhat.com/security/cve/CVE-2014-4345
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-4345
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-4345
  • article
    http://web.mit.edu/Kerberos/advisories/MITKRB5-SA-2014-001.txt