Bugzilla – Bug 886016
VUL-0: CVE-2014-4341 CVE-2014-4342: krb5: denial of service flaws when handling RFC 1964 tokens
Last modified: 2016-04-11 16:13:09 UTC
CVE-2014-4341 and CVE-2014-4342 Flaws were found in the way MIT Kerberos handled RFC 1964 tokens. A man-in-the-middle attacker able to inject packets into an application's GSS-API session could use this flaw to crash the application. References: References: https://github.com/krb5/krb5/commit/fb99962cbd063ac04c9a9d2cc7c75eab73f3533d https://bugzilla.redhat.com/show_bug.cgi?id=1116180 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-4341 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-4342 http://people.canonical.com/~ubuntu-security/cve/2014/CVE-2014-4341.html http://people.canonical.com/~ubuntu-security/cve/2014/CVE-2014-4342.html http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4341 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4342
bugbot adjusting priority
An update workflow for this issue was started. This issue was rated as moderate. Please submit fixed packages until 2014-08-12. When done, reassign the bug to security-team@suse.de. https://swamp.suse.de/webswamp/wf/58451
openSUSE-SU-2014:0977-1: An update that fixes four vulnerabilities is now available. Category: security (low) Bug References: 886016,888697 CVE References: CVE-2014-4341,CVE-2014-4342,CVE-2014-4343,CVE-2014-4344 Sources used: openSUSE 13.1 (src): krb5-1.11.3-3.8.1, krb5-mini-1.11.3-3.8.1 openSUSE 12.3 (src): krb5-1.10.2-10.26.1, krb5-doc-1.10.2-10.26.2, krb5-mini-1.10.2-10.26.1
SUSE-SU-2014:0989-1: An update that fixes four vulnerabilities is now available. Category: security (moderate) Bug References: 886016,888697 CVE References: CVE-2014-4341,CVE-2014-4342,CVE-2014-4343,CVE-2014-4344 Sources used: SUSE Linux Enterprise Software Development Kit 11 SP3 (src): krb5-1.6.3-133.49.60.1 SUSE Linux Enterprise Server 11 SP3 for VMware (src): krb5-1.6.3-133.49.60.1, krb5-doc-1.6.3-133.49.60.1, krb5-plugins-1.6.3-133.49.60.1 SUSE Linux Enterprise Server 11 SP3 (src): krb5-1.6.3-133.49.60.1, krb5-doc-1.6.3-133.49.60.1, krb5-plugins-1.6.3-133.49.60.1 SUSE Linux Enterprise Desktop 11 SP3 (src): krb5-1.6.3-133.49.60.1
was released