Vulnerability Details : CVE-2015-2698
The iakerb_gss_export_sec_context function in lib/gssapi/krb5/iakerb.c in MIT Kerberos 5 (aka krb5) 1.14 pre-release 2015-09-14 improperly accesses a certain pointer, which allows remote authenticated users to cause a denial of service (memory corruption) or possibly have unspecified other impact by interacting with an application that calls the gss_export_sec_context function. NOTE: this vulnerability exists because of an incorrect fix for CVE-2015-2696.
Vulnerability category: Memory CorruptionDenial of service
Products affected by CVE-2015-2698
- cpe:2.3:a:mit:kerberos_5:1.14:beta2:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2015-2698
1.58%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 80 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2015-2698
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
8.5
|
HIGH | AV:N/AC:M/Au:S/C:C/I:C/A:C |
6.8
|
10.0
|
NIST |
CWE ids for CVE-2015-2698
-
The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.Assigned by: nvd@nist.gov (Primary)
References for CVE-2015-2698
-
https://github.com/krb5/krb5/commit/3db8dfec1ef50ddd78d6ba9503185995876a39fd
Fix IAKERB context export/import [CVE-2015-2698] · krb5/krb5@3db8dfe · GitHub
-
http://lists.opensuse.org/opensuse-updates/2015-12/msg00124.html
openSUSE-SU-2015:2376-1: moderate: Security update for krb5
-
http://lists.opensuse.org/opensuse-updates/2015-11/msg00116.html
openSUSE-SU-2015:2055-1: moderate: Security update for krb5
-
http://www.ubuntu.com/usn/USN-2810-1
USN-2810-1: Kerberos vulnerabilities | Ubuntu security notices
-
http://krbdev.mit.edu/rt/Ticket/Display.html?id=8273
#8273: Fix IAKERB context export/import [CVE-2015-2698]Vendor Advisory
Jump to