CVE-2015-2695
Fixed in a distro release EPSS 6%
lib/gssapi/spnego/spnego_mech.c in MIT Kerberos 5 (aka krb5) before 1.14 relies on an inappropriate context handle, which allows remote attackers to cause a denial of service (incorrect pointer read and process crash) via a crafted SPNEGO packet that is mishandled during a gss_inquire_context call.
Products: mit kerberos_5, oracle solaris, canonical ubuntu_linux, debian_linux, opensuse leap, opensuse, suse linux_enterprise_desktop, suse linux_enterprise_server, suse linux_enterprise_software_development_kit
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | krb5 | 1.13.2+dfsg-3 |
| Debian 13 | krb5 | 1.13.2+dfsg-3 |
| Debian 14 | krb5 | 1.13.2+dfsg-3 |
| Debian 6.0 | krb5 | 1.8.3+dfsg-4squeeze10 |
| Debian 7 | krb5 | 1.10.1+dfsg-5+deb7u4 |
| Debian 8 | krb5 | 1.12.1+dfsg-19+deb8u1 |
| SUSE Linux Enterprise Desktop 11 SP3 | krb5 | 1.6.3-133.49.103.1 |
| SUSE Linux Enterprise Desktop 11 SP3 | krb5 | 1.6.3-133.49.97.1 |
| SUSE Linux Enterprise Desktop 11 SP4 | krb5 | 1.6.3-133.49.103.1 |
| SUSE Linux Enterprise Desktop 11 SP4 | krb5 | 1.6.3-133.49.97.1 |
| SUSE Linux Enterprise Desktop 12 | krb5 | 1.12.1-19.1 |
| SUSE Linux Enterprise Server 11 SP3 | krb5 | 1.6.3-133.49.103.1 |
| SUSE Linux Enterprise Server 11 SP3 | krb5 | 1.6.3-133.49.97.1 |
| SUSE Linux Enterprise Server 11 SP3 | krb5-doc | 1.6.3-133.49.97.3 |
| SUSE Linux Enterprise Server 11 SP3 | krb5-plugins | 1.6.3-133.49.97.3 |
| SUSE Linux Enterprise Server 11 SP3-TERADATA | krb5 | 1.6.3-133.49.103.1 |
| SUSE Linux Enterprise Server 11 SP3-TERADATA | krb5 | 1.6.3-133.49.97.1 |
| SUSE Linux Enterprise Server 11 SP3-TERADATA | krb5-doc | 1.6.3-133.49.97.3 |
| SUSE Linux Enterprise Server 11 SP3-TERADATA | krb5-plugins | 1.6.3-133.49.97.3 |
| SUSE Linux Enterprise Server 11 SP4 | krb5 | 1.6.3-133.49.103.1 |
| SUSE Linux Enterprise Server 11 SP4 | krb5 | 1.6.3-133.49.97.1 |
| SUSE Linux Enterprise Server 11 SP4 | krb5-doc | 1.6.3-133.49.97.3 |
| SUSE Linux Enterprise Server 11 SP4 | krb5-plugins | 1.6.3-133.49.97.3 |
| SUSE Linux Enterprise Server 12 | krb5 | 1.12.1-19.1 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP3 | krb5 | 1.6.3-133.49.103.1 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP3 | krb5 | 1.6.3-133.49.97.1 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP3 | krb5-doc | 1.6.3-133.49.97.3 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP3 | krb5-plugins | 1.6.3-133.49.97.3 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP4 | krb5 | 1.6.3-133.49.97.1 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP4 | krb5 | 1.6.3-133.49.103.1 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP4 | krb5-doc | 1.6.3-133.49.97.3 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP4 | krb5-plugins | 1.6.3-133.49.97.3 |
| SUSE Linux Enterprise Server for SAP Applications 12 | krb5 | 1.12.1-19.1 |
| SUSE Linux Enterprise Software Development Kit 11 SP3 | krb5 | 1.6.3-133.49.103.1 |
| SUSE Linux Enterprise Software Development Kit 11 SP3 | krb5 | 1.6.3-133.49.97.1 |
| SUSE Linux Enterprise Software Development Kit 11 SP4 | krb5 | 1.6.3-133.49.103.1 |
| SUSE Linux Enterprise Software Development Kit 11 SP4 | krb5 | 1.6.3-133.49.97.1 |
| SUSE Linux Enterprise Software Development Kit 12 | krb5 | 1.12.1-19.1 |
| Ubuntu 14.04 LTS | krb5 | 1.12+dfsg-2ubuntu5.2 |
| openSUSE Tumbleweed | krb5 | 1.15-1.1 |