String Handling Vulnerability in MIT Kerberos 5 by MIT

CVE-2014-5355

What is CVE-2014-5355?

MIT Kerberos 5 versions before 1.13.1 contain a vulnerability where the krb5_read_message function expects a data field represented as a string terminated by a '\0' character. This flaw can allow attackers to trigger a denial of service via two methods: supplying a zero-byte version string or omitting the necessary '\0' character, leading to NULL pointer dereference and out-of-bounds read conditions. This vulnerability highlights critical flaws in the handling of string data, which can be exploited in various server and user contexts within the affected Kerberos libraries.

References