CVE-2015-8631
Fixed in a distro release EPSS 5%
Multiple memory leaks in kadmin/server/server_stubs.c in kadmind in MIT Kerberos 5 (aka krb5) before 1.13.4 and 1.14.x before 1.14.1 allow remote authenticated users to cause a denial of service (memory consumption) via a request specifying a NULL principal name.
Products: mit kerberos_5, opensuse leap, opensuse, debian_linux, redhat enterprise_linux_desktop, redhat enterprise_linux_eus, redhat enterprise_linux_server, redhat enterprise_linux_server_aus, redhat enterprise_linux_server_tus, redhat enterprise_linux_workstation, oracle linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Alpine 3.4 | krb5 | 1.14-r1 |
| Debian 12 | krb5 | 1.13.2+dfsg-5 |
| Debian 13 | krb5 | 1.13.2+dfsg-5 |
| Debian 14 | krb5 | 1.13.2+dfsg-5 |
| Debian 6.0 | krb5 | 1.8.3+dfsg-4squeeze11 |
| Debian 7 | krb5 | 1.10.1+dfsg-5+deb7u7 |
| Debian 8 | krb5 | 1.12.1+dfsg-19+deb8u2 |
| Red Hat Enterprise Linux 6 | krb5 | 0:1.10.3-42z1.el6_7 |
| Red Hat Enterprise Linux 6 | krb5-debuginfo | 0:1.10.3-42z1.el6_7 |
| Red Hat Enterprise Linux 6 | krb5-devel | 0:1.10.3-42z1.el6_7 |
| Red Hat Enterprise Linux 6 | krb5-libs | 0:1.10.3-42z1.el6_7 |
| Red Hat Enterprise Linux 6 | krb5-pkinit-openssl | 0:1.10.3-42z1.el6_7 |
| Red Hat Enterprise Linux 6 | krb5-server | 0:1.10.3-42z1.el6_7 |
| Red Hat Enterprise Linux 6 | krb5-server-ldap | 0:1.10.3-42z1.el6_7 |
| Red Hat Enterprise Linux 6 | krb5-workstation | 0:1.10.3-42z1.el6_7 |
| Red Hat Enterprise Linux 7 | krb5 | 0:1.13.2-12.el7_2 |
| Red Hat Enterprise Linux 7 | krb5-debuginfo | 0:1.13.2-12.el7_2 |
| Red Hat Enterprise Linux 7 | krb5-devel | 0:1.13.2-12.el7_2 |
| Red Hat Enterprise Linux 7 | krb5-libs | 0:1.13.2-12.el7_2 |
| Red Hat Enterprise Linux 7 | krb5-pkinit | 0:1.13.2-12.el7_2 |
| Red Hat Enterprise Linux 7 | krb5-server | 0:1.13.2-12.el7_2 |
| Red Hat Enterprise Linux 7 | krb5-server-ldap | 0:1.13.2-12.el7_2 |
| Red Hat Enterprise Linux 7 | krb5-workstation | 0:1.13.2-12.el7_2 |
| SUSE Linux Enterprise Desktop 11 SP4 | krb5 | 1.6.3-133.49.106.1 |
| SUSE Linux Enterprise Desktop 12 | krb5 | 1.12.1-25.1 |
| SUSE Linux Enterprise Desktop 12 SP1 | krb5 | 1.12.1-25.1 |
| SUSE Linux Enterprise Server 11 SP4 | krb5 | 1.6.3-133.49.106.1 |
| SUSE Linux Enterprise Server 12 | krb5 | 1.12.1-25.1 |
| SUSE Linux Enterprise Server 12 SP1 | krb5 | 1.12.1-25.1 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP4 | krb5 | 1.6.3-133.49.106.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 | krb5 | 1.12.1-25.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP1 | krb5 | 1.12.1-25.1 |
| SUSE Linux Enterprise Software Development Kit 11 SP4 | krb5 | 1.6.3-133.49.106.1 |
| SUSE Linux Enterprise Software Development Kit 12 | krb5 | 1.12.1-25.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP1 | krb5 | 1.12.1-25.1 |
| Ubuntu 14.04 LTS | krb5 | 1.12+dfsg-2ubuntu5.4 |
| openSUSE Tumbleweed | krb5 | 1.15-1.1 |