NULL pointer dereference in Kerberos 5 - CVE-2014-5354

Vulnerability identifier: #VU32453

CSH Severity: Low

CVSS v4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]

CVE-ID: CVE-2014-5354

CWE-ID: CWE-476

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to a NULL pointer dereference error in MIT Kerberos 5 (aka krb5) 1.12.x and 1.13.x before 1.13.1, when the KDC uses LDAP, allows remote authenticated users to cause a denial of service (NULL pointer dereference and daemon crash) by creating a database entry for a keyless principal, as demonstrated by a kadmin "add_principal -nokey" or "purgekeys -all" command. <a href="http://cwe.mitre.org/data/definitions/476. A remote attacker can perform a denial of service (DoS) attack.

Kerberos 5
Ubuntu
krb5 (Alpine package)
krb5-kdc (Ubuntu package)
krb5-kdc-ldap (Ubuntu package)
krb5-pkinit (Ubuntu package)
krb5-user (Ubuntu package)
libgssapi-krb5-2 (Ubuntu package)
libgssrpc4 (Ubuntu package)
libk5crypto3 (Ubuntu package)
libkrb5-3 (Ubuntu package)
libkrb5support0 (Ubuntu package)
krb5-admin-server (Ubuntu package)
libkdb5-4 (Ubuntu package)
libkadm5srv-mit7 (Ubuntu package)
libkadm5clnt-mit7 (Ubuntu package)
libkadm5srv-mit8 (Ubuntu package)
libkrb53 (Ubuntu package)
libkadm5clnt-mit8 (Ubuntu package)
libkdb5-6 (Ubuntu package)
libkdb5-7 (Ubuntu package)
libkadm5clnt-mit9 (Ubuntu package)
libkadm5srv-mit9 (Ubuntu package)
krb5-otp (Ubuntu package)
libkrad0 (Ubuntu package)

Cybersecurity Help is currently unaware of any official solution to address this vulnerability.

krb5 (Alpine package) - update to 1.13-r1
krb5-kdc (Ubuntu package) - addressed in versions 1.8.1+dfsg-2ubuntu0.14, 1.10+dfsg~beta1-2ubuntu0.6, 1.12+dfsg-2ubuntu5.1, 1.12.1+dfsg-10ubuntu0.1
krb5-kdc-ldap (Ubuntu package) - addressed in versions 1.8.1+dfsg-2ubuntu0.14, 1.10+dfsg~beta1-2ubuntu0.6, 1.12+dfsg-2ubuntu5.1, 1.12.1+dfsg-10ubuntu0.1
krb5-pkinit (Ubuntu package) - addressed in versions 1.8.1+dfsg-2ubuntu0.14, 1.10+dfsg~beta1-2ubuntu0.6, 1.12+dfsg-2ubuntu5.1, 1.12.1+dfsg-10ubuntu0.1
krb5-user (Ubuntu package) - addressed in versions 1.8.1+dfsg-2ubuntu0.14, 1.10+dfsg~beta1-2ubuntu0.6, 1.12+dfsg-2ubuntu5.1, 1.12.1+dfsg-10ubuntu0.1
libgssapi-krb5-2 (Ubuntu package) - addressed in versions 1.8.1+dfsg-2ubuntu0.14, 1.10+dfsg~beta1-2ubuntu0.6, 1.12+dfsg-2ubuntu5.1, 1.12.1+dfsg-10ubuntu0.1
libgssrpc4 (Ubuntu package) - addressed in versions 1.8.1+dfsg-2ubuntu0.14, 1.10+dfsg~beta1-2ubuntu0.6, 1.12+dfsg-2ubuntu5.1, 1.12.1+dfsg-10ubuntu0.1
libk5crypto3 (Ubuntu package) - addressed in versions 1.8.1+dfsg-2ubuntu0.14, 1.10+dfsg~beta1-2ubuntu0.6, 1.12+dfsg-2ubuntu5.1, 1.12.1+dfsg-10ubuntu0.1
libkrb5-3 (Ubuntu package) - addressed in versions 1.8.1+dfsg-2ubuntu0.14, 1.10+dfsg~beta1-2ubuntu0.6, 1.12+dfsg-2ubuntu5.1, 1.12.1+dfsg-10ubuntu0.1
libkrb5support0 (Ubuntu package) - addressed in versions 1.8.1+dfsg-2ubuntu0.14, 1.10+dfsg~beta1-2ubuntu0.6, 1.12+dfsg-2ubuntu5.1, 1.12.1+dfsg-10ubuntu0.1
krb5-admin-server (Ubuntu package) - addressed in versions 1.8.1+dfsg-2ubuntu0.14, 1.10+dfsg~beta1-2ubuntu0.6, 1.12+dfsg-2ubuntu5.1, 1.12.1+dfsg-10ubuntu0.1
libkdb5-4 (Ubuntu package) - update to 1.8.1+dfsg-2ubuntu0.14
libkadm5srv-mit7 (Ubuntu package) - update to 1.8.1+dfsg-2ubuntu0.14
libkadm5clnt-mit7 (Ubuntu package) - update to 1.8.1+dfsg-2ubuntu0.14
libkadm5srv-mit8 (Ubuntu package) - addressed in versions 1.10+dfsg~beta1-2ubuntu0.6, 1.12+dfsg-2ubuntu5.1
libkrb53 (Ubuntu package) - update to 1.10+dfsg~beta1-2ubuntu0.6
libkadm5clnt-mit8 (Ubuntu package) - update to 1.10+dfsg~beta1-2ubuntu0.6
libkdb5-6 (Ubuntu package) - update to 1.10+dfsg~beta1-2ubuntu0.6
libkdb5-7 (Ubuntu package) - addressed in versions 1.12+dfsg-2ubuntu5.1, 1.12.1+dfsg-10ubuntu0.1
libkadm5clnt-mit9 (Ubuntu package) - addressed in versions 1.12+dfsg-2ubuntu5.1, 1.12.1+dfsg-10ubuntu0.1
libkadm5srv-mit9 (Ubuntu package) - addressed in versions 1.12+dfsg-2ubuntu5.1, 1.12.1+dfsg-10ubuntu0.1
krb5-otp (Ubuntu package) - addressed in versions 1.12+dfsg-2ubuntu5.1, 1.12.1+dfsg-10ubuntu0.1
libkrad0 (Ubuntu package) - addressed in versions 1.12+dfsg-2ubuntu5.1, 1.12.1+dfsg-10ubuntu0.1

• http://lists.opensuse.org/opensuse-updates/2015-03/msg00061.html
• http://www.securityfocus.com/bid/71680
• http://www.securitytracker.com/id/1031376
• http://www.ubuntu.com/usn/USN-2498-1
• https://github.com/krb5/krb5/commit/04038bf3633c4b909b5ded3072dc88c8c419bf16

• NULL pointer dereference in web.mit.edu krb5
• NULL pointer dereference in krb5 (Alpine package)
• Ubuntu update for krb5