CVE-2015-2698: Buffer Overflow
The iakerbgssexportseccontext function in lib/gssapi/krb5/iakerb.c in MIT Kerberos 5 (aka krb5) 1.14 pre-release 2015-09-14 improperly accesses a certain pointer, which allows remote authenticated users to cause a denial of service (memory corruption) or possibly have unspecified other impact by interacting with an application that calls the gssexportseccontext function. NOTE: this vulnerability exists because of an incorrect fix for CVE-2015-2696.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-2698?
CVE-2015-2698 has a high severity rating due to the potential for denial of service and memory corruption.
How do I fix CVE-2015-2698?
To fix CVE-2015-2698, upgrade to a version of MIT Kerberos 5 that is later than 1.14 beta2 that addresses this vulnerability.
Who is affected by CVE-2015-2698?
CVE-2015-2698 affects users of MIT Kerberos 5 version 1.14 beta2.
What type of vulnerability is CVE-2015-2698?
CVE-2015-2698 is a vulnerability that can lead to memory corruption and potentially cause a denial of service.
Can remote users exploit CVE-2015-2698?
Yes, remote authenticated users can exploit CVE-2015-2698 to cause denial of service.