CVE-2014-4343: Double Free
A double-free flaw was found in the MIT Kerberos SPNEGO initiators. An attacker able to spoof packets to appear as though they are from an GSSAPI acceptor could use this flaw to crash a client application that uses MIT Kerberos.
It is reported that this issue affects version 1.10 and later.
Upstream commit and further details:
https://github.com/krb5/krb5/commit/f18ddf5d82de0ab7591a36e465bc24225776940f
Other sources
Double free vulnerability in the initctxreselect function in the SPNEGO initiator in lib/gssapi/spnego/spnegomech.c in MIT Kerberos 5 (aka krb5) 1.10.x through 1.12.x before 1.12.2 allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via network traffic that appears to come from an intended acceptor, but specifies a security mechanism different from the one proposed by the initiator.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2014-4343?
CVE-2014-4343 is classified as a medium severity vulnerability due to its potential to cause application crashes.
How do I fix CVE-2014-4343?
To fix CVE-2014-4343, upgrade your MIT Kerberos 5 implementation to version 1.12.1 or later.
Which versions of MIT Kerberos are affected by CVE-2014-4343?
CVE-2014-4343 affects MIT Kerberos 5 versions 1.10 and later, including various versions up to 1.12.
What impact does CVE-2014-4343 have on applications?
CVE-2014-4343 can cause crashes in client applications that use MIT Kerberos when the flawed function is invoked.
Is there a workaround for CVE-2014-4343?
There is no reliable workaround for CVE-2014-4343; updating to an unimpacted version is the recommended solution.