CVE-2014-4341: Medium severity MIT Kerberos 5 vulnerability
Published Jul 20, 2014
·Updated
MIT Kerberos 5 (aka krb5) before 1.12.2 allows remote attackers to cause a denial of service (buffer over-read and application crash) by injecting invalid tokens into a GSSAPI application session.
Affected Software
22 affected components
MIT Kerberos 5<1.12.2
redhat Enterprise Linux Desktop=7.0
redhat Enterprise Linux Eus=7.3
redhat Enterprise Linux Eus=7.4
redhat Enterprise Linux Eus=7.5
redhat Enterprise Linux Eus=7.6
redhat Enterprise Linux Eus=7.7
redhat Enterprise Linux Server=7.0
redhat Enterprise Linux Server Aus=7.3
redhat Enterprise Linux Server Aus=7.4
redhat Enterprise Linux Server Aus=7.6
redhat Enterprise Linux Server Aus=7.7
redhat Enterprise Linux Server Eus=7.3
redhat Enterprise Linux Server Eus=7.4
redhat Enterprise Linux Server Eus=7.6
redhat Enterprise Linux Server Eus=7.7
redhat Enterprise Linux Tus=7.3
redhat Enterprise Linux Tus=7.6
redhat Enterprise Linux Tus=7.7
redhat Enterprise Linux Workstation=7.0
Debian Debian Linux=7.0
Fedoraproject Fedora=20
Remediation
Event History
Jul 20, 2014
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2014-4341?
CVE-2014-4341 is classified as a denial of service vulnerability that can lead to application crashes.
2
How do I fix CVE-2014-4341?
To address CVE-2014-4341, upgrade to MIT Kerberos 5 version 1.12.2 or later.
3
Which software is affected by CVE-2014-4341?
CVE-2014-4341 affects multiple versions of MIT Kerberos 5 and Red Hat Enterprise Linux products.
4
Can CVE-2014-4341 be exploited remotely?
Yes, CVE-2014-4341 can be exploited by remote attackers through invalid token injections.
5
What impact does CVE-2014-4341 have on systems?
Exploitation of CVE-2014-4341 can lead to buffer over-reads and application crashes, resulting in denial of service.