Home

CVE-2014-4345

Description

Off-by-one error in the krb5_encode_krbsecretkey function in plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c in the LDAP KDB module in kadmind in MIT Kerberos 5 (aka krb5) 1.6.x through 1.11.x before 1.11.6 and 1.12.x before 1.12.2 allows remote authenticated users to cause a denial of service (buffer overflow) or possibly execute arbitrary code via a series of cpw -keepold commands.

Risk Information

Base Score
7.3
MODERATE
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
EPSS Score
Exploitation Probability
12.674

Associated Vulnerability

VulnerabilityOS Platform
(RHSA-2014:1255) Moderate: krb5 security update krb5-devel-1.6.1-80.el5_11.i386.rpmLinux
(RHSA-2014:1255) Moderate: krb5 security update krb5-devel-1.6.1-80.el5_11.x86_64.rpmLinux
(RHSA-2014:1255) Moderate: krb5 security update krb5-libs-1.6.1-80.el5_11.i386.rpmLinux
(RHSA-2014:1255) Moderate: krb5 security update krb5-libs-1.6.1-80.el5_11.x86_64.rpmLinux
(RHSA-2014:1255) Moderate: krb5 security update krb5-server-1.6.1-80.el5_11.i386.rpmLinux
(RHSA-2014:1255) Moderate: krb5 security update krb5-server-1.6.1-80.el5_11.x86_64.rpmLinux
(RHSA-2014:1255) Moderate: krb5 security update krb5-server-ldap-1.6.1-80.el5_11.i386.rpmLinux
(RHSA-2014:1255) Moderate: krb5 security update krb5-server-ldap-1.6.1-80.el5_11.x86_64.rpmLinux
(RHSA-2014:1255) Moderate: krb5 security update krb5-workstation-1.6.1-80.el5_11.i386.rpmLinux
(RHSA-2014:1255) Moderate: krb5 security update krb5-workstation-1.6.1-80.el5_11.x86_64.rpmLinux
CVE-2014-4345NCM

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234