NVD

Id
36126  
Name
CVE-2014-9423  
Description
The svcauth_gss_accept_sec_context function in lib/rpc/svc_auth_gss.c in MIT Kerberos 5 (aka krb5) 1.11.x through 1.11.5, 1.12.x through 1.12.2, and 1.13.x before 1.13.1 transmits uninitialized interposer data to clients, which allows remote attackers to obtain sensitive information from process heap memory by sniffing the network for data in a handle field.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-19  
Published
2015-02-19  
Modified Date
2016-11-28  
Seq
2014-9423  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
184644 36126 CVE-2014-9423 FEDORA-2015-2382  View
184645 36126 CVE-2014-9423 FEDORA-2015-2347  View
184646 36126 CVE-2014-9423 SUSE-SU-2015:0257  View
184647 36126 CVE-2014-9423 SUSE-SU-2015:0290  View
184648 36126 CVE-2014-9423 openSUSE-SU-2015:0255  View
184649 36126 CVE-2014-9423 RHSA-2015:0439  View
184650 36126 CVE-2014-9423 http://web.mit.edu/kerberos/advisories/2015-001-patch-r113.txt  View
184651 36126 CVE-2014-9423 http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2015-001.txt  View
184652 36126 CVE-2014-9423 DSA-3153  View
184653 36126 CVE-2014-9423 MDVSA-2015:069  View
184654 36126 CVE-2014-9423 72503  View
184655 36126 CVE-2014-9423 USN-2498-1  View
184656 36126 CVE-2014-9423 https://github.com/krb5/krb5/commit/5bb8a6b9c9eb8dd22bc9526751610aaa255ead9c  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
19047 JVNDB-2014-007922 MIT Kerberos 5 の lib/rpc/svc_auth_gss.c の svcauth_gss_accept_sec_context 関数における重要な情報を取得される脆弱性 MIT Kerberos 5 (別名 krb5) の lib/rpc/svc_auth_gss.c の svcauth_gss_accept_sec_context 関数は、クライアントに初期化されていないインターポーザデータを送信するため、プロセスヒープメモリから重要な情報を取得される脆弱性が存在します。 CVE-2014-9423 76716 CVE-2014-9423 36126 5 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-007922.html 2014-12-30 2015-06-08 View