Skip to content
OpenAdvisories
Unscored USN-2810-1 7 CVEs

krb5 vulnerabilities

Published Nov 12, 2015 · Updated Apr 22, 2026

Ecosystem: Ubuntu

Summary

It was discovered that the Kerberos kpasswd service incorrectly handled
certain UDP packets. A remote attacker could possibly use this issue to
cause resource consumption, resulting in a denial of service. This issue
only affected Ubuntu 12.04 LTS. (CVE-2002-2443)

It was discovered that Kerberos incorrectly handled null bytes in certain
data fields. A remote attacker could possibly use this issue to cause a
denial of service. This issue only affected Ubuntu 12.04 LTS and Ubuntu
14.04 LTS. (CVE-2014-5355)

It was discovered that the Kerberos kdcpreauth modules incorrectly tracked
certain client requests. A remote attacker could possibly use this issue
to bypass intended preauthentication requirements. This issue only affected
Ubuntu 14.04 LTS and Ubuntu 15.04. (CVE-2015-2694)

It was discovered that Kerberos incorrectly handled certain SPNEGO packets.
A remote attacker could possibly use this issue to cause a denial of
service. (CVE-2015-2695)

It was discovered that Kerberos incorrectly handled certain IAKERB packets.
A remote attacker could possibly use this issue to cause a denial of
service. (CVE-2015-2696, CVE-2015-2698)

It was discovered that Kerberos incorrectly handled certain TGS requests. A
remote attacker could possibly use this issue to cause a denial of service.
(CVE-2015-2697)

Fixed packages 1

ReleasePackageFixed in
Ubuntu · 14.04 LTS 14.04:LTS krb5 1.12+dfsg-2ubuntu5.2

Vulnerabilities 7

  • Unscored —
    CVE-2002-2443

    schpw.c in the kpasswd service in kadmind in MIT Kerberos 5 (aka krb5) before 1.11.3 does not properly validate UDP pac…

    krb5 Debian
  • Unscored —
    CVE-2014-5355

    MIT Kerberos 5 (aka krb5) through 1.13.1 incorrectly expects that a krb5_read_message data field is represented as a st…

    krb5 krb5 Debian Ubuntu
  • Unscored —
    CVE-2015-2694

    The kdcpreauth modules in MIT Kerberos 5 (aka krb5) 1.12.x and 1.13.x before 1.13.2 do not properly track whether a cli…

    krb5 krb5 Debian Ubuntu
  • Unscored —
    CVE-2015-2695

    lib/gssapi/spnego/spnego_mech.c in MIT Kerberos 5 (aka krb5) before 1.14 relies on an inappropriate context handle, whi…

    krb5 krb5 Debian Ubuntu
  • Unscored —
    CVE-2015-2696

    lib/gssapi/krb5/iakerb.c in MIT Kerberos 5 (aka krb5) before 1.14 relies on an inappropriate context handle, which allo…

    krb5 krb5 Debian Ubuntu
  • Unscored —
    CVE-2015-2697

    The build_principal_va function in lib/krb5/krb/bld_princ.c in MIT Kerberos 5 (aka krb5) before 1.14 allows remote auth…

    krb5 krb5 Debian Ubuntu
  • Unscored —
    CVE-2015-2698

    The iakerb_gss_export_sec_context function in lib/gssapi/krb5/iakerb.c in MIT Kerberos 5 (aka krb5) 1.14 pre-release 20…

    krb5 krb5 Debian Ubuntu

References

  • report
    https://ubuntu.com/security/CVE-2002-2443
  • report
    https://ubuntu.com/security/CVE-2014-5355
  • report
    https://ubuntu.com/security/CVE-2015-2694
  • report
    https://ubuntu.com/security/CVE-2015-2695
  • report
    https://ubuntu.com/security/CVE-2015-2696
  • report
    https://ubuntu.com/security/CVE-2015-2697
  • report
    https://ubuntu.com/security/CVE-2015-2698