Denial of Service Vulnerability in MIT Kerberos 5 libgssapi_krb5
CVE-2014-5352

Currently unrated

Key Information:

Vendor: Mit
Status: Kerberos 5
Vendor: CVE Published:; 19 February 2015

What is CVE-2014-5352?

The krb5_gss_process_context_token function in the MIT Kerberos 5 libgssapi_krb5 library fails to properly maintain security-context handles. This oversight allows remote authenticated users to potentially cause a denial of service through crafted GSSAPI traffic, leading to situations such as use-after-free and double free errors. The issue may also enable the execution of arbitrary code due to improper handling of security-context tokens.