NVD

Id
32347  
Name
CVE-2014-4345  
Description
Off-by-one error in the krb5_encode_krbsecretkey function in plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c in the LDAP KDB module in kadmind in MIT Kerberos 5 (aka krb5) 1.6.x through 1.11.x before 1.11.6 and 1.12.x before 1.12.2 allows remote authenticated users to cause a denial of service (buffer overflow) or possibly execute arbitrary code via a series of "cpw -keepold" commands.  
Reject
 
CVSS Version
2  
CVSS Score
8.5  
Severity
High  
CVSS Base Score
8.5  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
6.8  
CVSS Vector
(AV:N/AC:M/Au:S/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2014-08-14  
Modified Date
2017-01-06  
Seq
2014-4345  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
170379 32347 CVE-2014-4345 http://advisories.mageia.org/MGASA-2014-0345.html  View
170380 32347 CVE-2014-4345 http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705  View
170381 32347 CVE-2014-4345 http://krbdev.mit.edu/rt/Ticket/Display.html?id=7980  View
170382 32347 CVE-2014-4345 http://linux.oracle.com/errata/ELSA-2014-1255.html  View
170383 32347 CVE-2014-4345 FEDORA-2014-9315  View
170384 32347 CVE-2014-4345 FEDORA-2014-9305  View
170385 32347 CVE-2014-4345 SUSE-SU-2014:1028  View
170386 32347 CVE-2014-4345 openSUSE-SU-2014:1043  View
170387 32347 CVE-2014-4345 RHSA-2014:1255  View
170388 32347 CVE-2014-4345 RHSA-2015:0439  View
170389 32347 CVE-2014-4345 59102  View
170390 32347 CVE-2014-4345 59993  View
170391 32347 CVE-2014-4345 60535  View
170392 32347 CVE-2014-4345 60776  View
170393 32347 CVE-2014-4345 61314  View
170394 32347 CVE-2014-4345 61353  View
170395 32347 CVE-2014-4345 GLSA-201412-53  View
170396 32347 CVE-2014-4345 http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2014-001.txt  View
170397 32347 CVE-2014-4345 DSA-3000  View
170398 32347 CVE-2014-4345 MDVSA-2014:165  View
170399 32347 CVE-2014-4345 109908  View
170400 32347 CVE-2014-4345 69168  View
170401 32347 CVE-2014-4345 1030705  View
170402 32347 CVE-2014-4345 kerberos-cve20144345-bo(95212)  View
170403 32347 CVE-2014-4345 https://blogs.oracle.com/sunsecurity/entry/cve_2014_4345_numeric_errors  View
170404 32347 CVE-2014-4345 https://bugzilla.redhat.com/show_bug.cgi?id=1128157  View
170405 32347 CVE-2014-4345 https://github.com/krb5/krb5/commit/dc7ed55c689d57de7f7408b34631bf06fec9dab1  View
170406 32347 CVE-2014-4345 https://github.com/krb5/krb5/pull/181  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
14945 JVNDB-2014-003820 MIT Kerberos 5 の kadmind の LDAP KDB モジュールの plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c におけるサービス運用妨害 (DoS) の脆弱性 MIT Kerberos 5 (別名 krb5) の kadmind の LDAP KDB モジュールの plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c の krb5_encode_krbsecretkey 関数には、一つずれエラー (Off-by-One error) により、サービス運用妨害 (バッファオーバーフロー) 状態にされる、または任意のコードを実行される脆弱性が存在します。 CVE-2014-4345 71633 CVE-2014-4345 32347 8.5 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-003820.html 2014-08-07 2015-06-08 View