CVE-2014-5355: Null Pointer Dereference
MIT Kerberos 5 (aka krb5) through 1.13.1 incorrectly expects that a krb5readmessage data field is represented as a string ending with a '\0' character, which allows remote attackers to (1) cause a denial of service (NULL pointer dereference) via a zero-byte version string or (2) cause a denial of service (out-of-bounds read) by omitting the '\0' character, related to appl/useruser/server.c and lib/krb5/krb/recvauth.c.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-5355?
CVE-2014-5355 has a severity rating that can lead to denial of service due to NULL pointer dereference.
Which versions of MIT Kerberos 5 are affected by CVE-2014-5355?
CVE-2014-5355 affects MIT Kerberos 5 versions 1.1 through 1.13.1.
How do I fix CVE-2014-5355?
The fix for CVE-2014-5355 involves updating MIT Kerberos 5 to version 1.13.2 or later.
What type of attack can be executed using CVE-2014-5355?
CVE-2014-5355 allows remote attackers to cause a denial of service via a zero-byte version string.
Is there a known exploit for CVE-2014-5355?
Yes, CVE-2014-5355 has been documented as a vulnerability that can be exploited for denial of service attacks.