CVE-2017-11462: Double Free
Double free vulnerability in MIT Kerberos 5 (aka krb5) allows attackers to have unspecified impact via vectors involving automatic deletion of security contexts on error.
Other sources
RFC 2744 permits a GSS-API implementation to delete an existing security context on a second or subsequent call to gssinitseccontext() or gssacceptseccontext() if the call results in an error. This API behavior has been found to be dangerous, leading to the possibility of memory errors in some callers. For safety, GSS-API implementations should instead preserve existing security contexts on error until the caller deletes them.
References:
http://krbdev.mit.edu/rt/Ticket/Display.html?id=8598
Upstream patch:
https://github.com/krb5/krb5/commit/56f7b1bc95a2a3eeb420e069e7655fb181ade5cf
— Red Hat
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2017-11462?
The severity of CVE-2017-11462 is classified as medium impact due to the possibility of unspecified impacts through automatic deletion of security contexts.
How do I fix CVE-2017-11462?
To fix CVE-2017-11462, upgrade to the latest patched version of MIT Kerberos 5, specifically versions 1.14.6 or later.
Which versions of MIT Kerberos 5 are affected by CVE-2017-11462?
CVE-2017-11462 affects MIT Kerberos 5 versions 1.14.0 to 1.15.1, including various beta versions.
Can CVE-2017-11462 lead to remote code execution?
CVE-2017-11462 does not directly lead to remote code execution, but it could potentially allow for an elevation of privileges through the vulnerability.
Is CVE-2017-11462 specific to any operating system?
CVE-2017-11462 primarily affects MIT Kerberos 5 implementations on various UNIX-like operating systems that utilize these Kerberos versions.