Bug 910458 (CVE-2014-5354) - VUL-1: CVE-2014-5354: krb5: NULL pointer dereference when using keyless entries
Summary: VUL-1: CVE-2014-5354: krb5: NULL pointer dereference when using keyless entries
Status: RESOLVED FIXED
Alias: CVE-2014-5354
Product: SUSE Security Incidents
Classification: Novell Products
Component: Incidents (show other bugs)
Version: unspecified
Hardware: Other openSUSE 13.2
: P3 - Medium : Minor
Target Milestone: ---
Assignee: Security Team bot
QA Contact: Security Team bot
URL: https://smash.suse.de/issue/111596/
Whiteboard: maint:running:60833:moderate
Keywords:
Depends on:
Blocks:
 
Reported: 2014-12-17 10:48 UTC by Alexander Bergmann
Modified: 2016-04-27 19:33 UTC (History)
4 users (show)

See Also:
Found By: Security Response Team
Services Priority:
Business Priority:
Blocker: ---
Marketing QA Status: ---
IT Deployment: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Alexander Bergmann 2014-12-17 10:48:42 UTC
public via rh#1174546

plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c in MIT Kerberos 5 (aka krb5)
1.12.x and 1.13.x before 1.13.1, when the KDC uses LDAP, allows remote
authenticated users to cause a denial of service (NULL pointer dereference and
daemon crash) by creating a database entry for a keyless principal, as
demonstrated by a kadmin "add_principal -nokey" or "purgekeys -all" command.

References:
https://bugzilla.redhat.com/show_bug.cgi?id=1174546
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-5354
http://seclists.org/oss-sec/2014/q4/1055
http://people.canonical.com/~ubuntu-security/cve/2014/CVE-2014-5354.html
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=773226
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5354
https://github.com/krb5/krb5/commit/04038bf3633c4b909b5ded3072dc88c8c419bf16
https://github.com/krb5/krb5/commit/d1f707024f1d0af6e54a18885322d70fa15ec4d3
Comment 1 Swamp Workflow Management 2014-12-17 23:00:34 UTC
bugbot adjusting priority
Comment 2 Victor Pereira 2015-02-16 10:12:11 UTC
It is reported that versions prior to 1.12 are not affected.

so just SLE-12 and OpenSUSE 13.2 are affected.
Comment 3 Victor Pereira 2015-02-16 11:10:35 UTC
I checked the SLE-12 codestream and with the version 12.1.1, we are not affected.
Comment 4 Bernhard Wiedemann 2015-02-16 14:00:09 UTC
This is an autogenerated message for OBS integration:
This bug (910458) was mentioned in
https://build.opensuse.org/request/show/286336 13.2 / krb5
Comment 5 Bernhard Wiedemann 2015-03-11 15:00:11 UTC
This is an autogenerated message for OBS integration:
This bug (910458) was mentioned in
https://build.opensuse.org/request/show/290309 13.2+13.1 / krb5+krb5-mini
Comment 7 Swamp Workflow Management 2015-03-19 18:06:19 UTC
openSUSE-SU-2015:0542-1: An update that fixes three vulnerabilities is now available.

Category: security (moderate)
Bug References: 910457,910458,918595
CVE References: CVE-2014-5353,CVE-2014-5354,CVE-2014-5355
Sources used:
openSUSE 13.2 (src):    krb5-1.12.2-12.1, krb5-mini-1.12.2-12.1
openSUSE 13.1 (src):    krb5-1.11.3-3.18.1, krb5-mini-1.11.3-3.18.1
Comment 8 Swamp Workflow Management 2015-07-22 11:08:14 UTC
SUSE-SU-2015:1276-1: An update that fixes four vulnerabilities is now available.

Category: security (moderate)
Bug References: 910457,910458,918595,928978
CVE References: CVE-2014-5353,CVE-2014-5354,CVE-2014-5355,CVE-2015-2694
Sources used:
SUSE Linux Enterprise Software Development Kit 12 (src):    krb5-1.12.1-16.1
SUSE Linux Enterprise Server 12 (src):    krb5-1.12.1-16.1
Comment 9 Swamp Workflow Management 2015-07-23 16:08:51 UTC
SUSE-SU-2015:1282-1: An update that fixes three vulnerabilities is now available.

Category: security (moderate)
Bug References: 910457,910458,918595
CVE References: CVE-2014-5353,CVE-2014-5354,CVE-2014-5355
Sources used:
SUSE Linux Enterprise Software Development Kit 11-SP4 (src):    krb5-1.6.3-133.49.68.1
SUSE Linux Enterprise Software Development Kit 11-SP3 (src):    krb5-1.6.3-133.49.68.1
SUSE Linux Enterprise Server for VMWare 11-SP3 (src):    krb5-1.6.3-133.49.68.1, krb5-doc-1.6.3-133.49.68.2, krb5-plugins-1.6.3-133.49.68.1
SUSE Linux Enterprise Server 11-SP4 (src):    krb5-1.6.3-133.49.68.1, krb5-doc-1.6.3-133.49.68.2, krb5-plugins-1.6.3-133.49.68.1
SUSE Linux Enterprise Server 11-SP3 (src):    krb5-1.6.3-133.49.68.1, krb5-doc-1.6.3-133.49.68.2, krb5-plugins-1.6.3-133.49.68.1
SUSE Linux Enterprise Desktop 11-SP4 (src):    krb5-1.6.3-133.49.68.1
SUSE Linux Enterprise Desktop 11-SP3 (src):    krb5-1.6.3-133.49.68.1
SUSE Linux Enterprise Debuginfo 11-SP3 (src):    krb5-1.6.3-133.49.68.1
Comment 10 Bernhard Wiedemann 2015-08-03 06:00:21 UTC
This is an autogenerated message for OBS integration:
This bug (910458) was mentioned in
https://build.opensuse.org/request/show/320084 42 / krb5
Comment 11 Marcus Meissner 2016-01-22 08:15:49 UTC
released