Skip to content
OpenAdvisories
Unscored RHSA-2014:1389 7 CVEs

Red Hat Security Advisory: krb5 security and bug fix update

Published Sep 15, 2024 · Updated Jun 28, 2026

Ecosystem: Red Hat

Fixed packages 32

ReleasePackageFixed in
Red Hat · RHEL 6 enterprise_linux:6::client krb5 0:1.10.3-33.el6
Red Hat · RHEL 6 enterprise_linux:6::client krb5-debuginfo 0:1.10.3-33.el6
Red Hat · RHEL 6 enterprise_linux:6::client krb5-devel 0:1.10.3-33.el6
Red Hat · RHEL 6 enterprise_linux:6::client krb5-libs 0:1.10.3-33.el6
Red Hat · RHEL 6 enterprise_linux:6::client krb5-pkinit-openssl 0:1.10.3-33.el6
Red Hat · RHEL 6 enterprise_linux:6::client krb5-server 0:1.10.3-33.el6
Red Hat · RHEL 6 enterprise_linux:6::client krb5-server-ldap 0:1.10.3-33.el6
Red Hat · RHEL 6 enterprise_linux:6::client krb5-workstation 0:1.10.3-33.el6
Red Hat · RHEL 6 enterprise_linux:6::computenode krb5 0:1.10.3-33.el6
Red Hat · RHEL 6 enterprise_linux:6::computenode krb5-debuginfo 0:1.10.3-33.el6
Red Hat · RHEL 6 enterprise_linux:6::computenode krb5-devel 0:1.10.3-33.el6
Red Hat · RHEL 6 enterprise_linux:6::computenode krb5-libs 0:1.10.3-33.el6
Red Hat · RHEL 6 enterprise_linux:6::computenode krb5-pkinit-openssl 0:1.10.3-33.el6
Red Hat · RHEL 6 enterprise_linux:6::computenode krb5-server 0:1.10.3-33.el6
Red Hat · RHEL 6 enterprise_linux:6::computenode krb5-server-ldap 0:1.10.3-33.el6
Red Hat · RHEL 6 enterprise_linux:6::computenode krb5-workstation 0:1.10.3-33.el6
Red Hat · RHEL 6 enterprise_linux:6::server krb5 0:1.10.3-33.el6
Red Hat · RHEL 6 enterprise_linux:6::server krb5-debuginfo 0:1.10.3-33.el6
Red Hat · RHEL 6 enterprise_linux:6::server krb5-devel 0:1.10.3-33.el6
Red Hat · RHEL 6 enterprise_linux:6::server krb5-libs 0:1.10.3-33.el6
Red Hat · RHEL 6 enterprise_linux:6::server krb5-pkinit-openssl 0:1.10.3-33.el6
Red Hat · RHEL 6 enterprise_linux:6::server krb5-server 0:1.10.3-33.el6
Red Hat · RHEL 6 enterprise_linux:6::server krb5-server-ldap 0:1.10.3-33.el6
Red Hat · RHEL 6 enterprise_linux:6::server krb5-workstation 0:1.10.3-33.el6
Red Hat · RHEL 6 enterprise_linux:6::workstation krb5 0:1.10.3-33.el6
Red Hat · RHEL 6 enterprise_linux:6::workstation krb5-debuginfo 0:1.10.3-33.el6
Red Hat · RHEL 6 enterprise_linux:6::workstation krb5-devel 0:1.10.3-33.el6
Red Hat · RHEL 6 enterprise_linux:6::workstation krb5-libs 0:1.10.3-33.el6
Red Hat · RHEL 6 enterprise_linux:6::workstation krb5-pkinit-openssl 0:1.10.3-33.el6
Red Hat · RHEL 6 enterprise_linux:6::workstation krb5-server 0:1.10.3-33.el6
Red Hat · RHEL 6 enterprise_linux:6::workstation krb5-server-ldap 0:1.10.3-33.el6
Red Hat · RHEL 6 enterprise_linux:6::workstation krb5-workstation 0:1.10.3-33.el6

Vulnerabilities 7

  • Unscored —
    CVE-2013-1418

    The setup_server_realm function in main.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.10…

    krb5 Debian
  • Unscored —
    CVE-2013-6800

    An unspecified third-party database module for the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.10.x al…

  • Unscored —
    CVE-2014-4341

    MIT Kerberos 5 (aka krb5) before 1.12.2 allows remote attackers to cause a denial of service (buffer over-read and appl…

    krb5 krb5 Debian Ubuntu
  • Unscored —
    CVE-2014-4342

    MIT Kerberos 5 (aka krb5) 1.7.x through 1.12.x before 1.12.2 allows remote attackers to cause a denial of service (buff…

    krb5 krb5 Debian Ubuntu
  • Unscored —
    CVE-2014-4343

    Double free vulnerability in the init_ctx_reselect function in the SPNEGO initiator in lib/gssapi/spnego/spnego_mech.c …

    krb5 krb5 Debian Ubuntu
  • Unscored —
    CVE-2014-4344

    The acc_ctx_cont function in the SPNEGO acceptor in lib/gssapi/spnego/spnego_mech.c in MIT Kerberos 5 (aka krb5) 1.5.x …

    krb5 krb5 Debian Ubuntu
  • Unscored —
    CVE-2014-4345

    Off-by-one error in the krb5_encode_krbsecretkey function in plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c in the LDAP…

    krb5 krb5 Debian Ubuntu

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • article
    https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/6/html/6.6_Technical_Notes/krb5.html#RHSA-2014-1389
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1001961
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1009389
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1026942
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1031499
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1059730
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1087068
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1113652
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1116180
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1120581
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1121876
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1121877
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1128157
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_1389.json
  • report
    https://access.redhat.com/security/cve/CVE-2013-1418
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2013-1418
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2013-1418
  • report
    https://access.redhat.com/security/cve/CVE-2013-6800
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2013-6800
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2013-6800
  • report
    https://access.redhat.com/security/cve/CVE-2014-4341
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-4341
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-4341
  • report
    https://access.redhat.com/security/cve/CVE-2014-4342
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-4342
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-4342
  • report
    https://access.redhat.com/security/cve/CVE-2014-4343
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-4343
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-4343
  • report
    https://access.redhat.com/security/cve/CVE-2014-4344
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-4344
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-4344
  • report
    https://access.redhat.com/security/cve/CVE-2014-4345
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-4345
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-4345
  • article
    http://web.mit.edu/Kerberos/advisories/MITKRB5-SA-2014-001.txt