Authentication bypass in Kerberos 5 - CVE-2017-7562

Vulnerability identifier: #VU12181

CSH Severity: Low

CVSS v4: 7.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2017-7562

CWE-ID: CWE-592

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote authenticated attacker to write arbitrary files on the target system.

The weakness exists due to an authentication bypass in the way krb5's certauth interface handled the validation of client certificates. A remote attacker can impersonate arbitrary principals under rare and erroneous circumstances.

Kerberos 5
Amazon Linux AMI
Red Hat Enterprise Linux Server
Red Hat Enterprise Linux Workstation
Red Hat Enterprise Linux Desktop
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for Scientific Computing
Red Hat Enterprise Linux for Power

Install update from vendor's website.

• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-7562

• Authentication bypass in Kerberos
• Amazon Linux AMI update for krb5
• Red Hat update for krb5