Upstream information
Description
The process_chpw_request function in schpw.c in the password-changing functionality in kadmind in MIT Kerberos 5 (aka krb5) 1.7 through 1.9 frees an invalid pointer, which allows remote attackers to execute arbitrary code or cause a denial of service (daemon crash) via a crafted request that triggers an error condition.SUSE information
Overall state of this security issue: Resolved
This issue is currently rated as having critical severity.
NVD | |
---|---|
Base Score | 10 |
Vector | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Access Vector | Network |
Access Complexity | Low |
Authentication | None |
Confidentiality Impact | Complete |
Integrity Impact | Complete |
Availability Impact | Complete |
SUSE Security Advisories:
- SUSE-SR:2011:007, published Tue, 19 Apr 2011 12:00:00 +0000 openSUSE-SU-2011:0348-1
List of released packages
Product(s) | Fixed package version(s) | References |
---|---|---|
SUSE Linux Enterprise Desktop 12 SP1 |
| Patchnames: SUSE Linux Enterprise Desktop 12 SP1 GA krb5-1.12.1-19.1 SUSE Linux Enterprise Software Development Kit 12 SP1 GA krb5-devel-1.12.1-19.1 |
SUSE Linux Enterprise Desktop 12 SP2 |
| Patchnames: SUSE Linux Enterprise Desktop 12 SP2 GA krb5-1.12.5-39.1 SUSE Linux Enterprise Software Development Kit 12 SP2 GA krb5-devel-1.12.5-39.1 |
SUSE Linux Enterprise Desktop 12 SP3 |
| Patchnames: SUSE Linux Enterprise Desktop 12 SP3 GA krb5-1.12.5-39.1 SUSE Linux Enterprise Software Development Kit 12 SP3 GA krb5-devel-1.12.5-39.1 |
SUSE Linux Enterprise Desktop 12 SP4 |
| Patchnames: SUSE Linux Enterprise Desktop 12 SP4 GA krb5-1.12.5-40.28.2 SUSE Linux Enterprise Software Development Kit 12 SP4 GA krb5-devel-1.12.5-40.28.2 |
SUSE Linux Enterprise Desktop 12 |
| Patchnames: SUSE Linux Enterprise Desktop 12 GA krb5-1.12.1-6.3 SUSE Linux Enterprise Software Development Kit 12 GA krb5-devel-1.12.1-6.3 |
SUSE Linux Enterprise Desktop 15 SUSE Linux Enterprise Module for Basesystem 15 |
| Patchnames: SUSE Linux Enterprise Module for Basesystem 15 GA krb5-1.15.2-4.25 |
SUSE Linux Enterprise High Performance Computing 12 SP5 |
| Patchnames: SUSE Linux Enterprise High Performance Computing 12 SP5 GA krb5-1.12.5-40.37.7 |
SUSE Linux Enterprise High Performance Computing 15 SUSE Linux Enterprise Server 15 SUSE Linux Enterprise Server for SAP Applications 15 |
| Patchnames: SUSE Linux Enterprise Module for Basesystem 15 GA krb5-1.15.2-4.25 SUSE Linux Enterprise Module for Server Applications 15 GA krb5-plugin-kdb-ldap-1.15.2-4.25 |
SUSE Linux Enterprise Micro 6.0 |
| Patchnames: SUSE Linux Enterprise Micro 6.0 GA krb5-1.20.1-4.11 |
SUSE Linux Enterprise Module for Server Applications 15 |
| Patchnames: SUSE Linux Enterprise Module for Server Applications 15 GA krb5-plugin-kdb-ldap-1.15.2-4.25 |
SUSE Linux Enterprise Server 12 SP1 |
| Patchnames: SUSE Linux Enterprise Server 12 SP1 GA krb5-1.12.1-19.1 SUSE Linux Enterprise Software Development Kit 12 SP1 GA krb5-devel-1.12.1-19.1 |
SUSE Linux Enterprise Server 12 SP2 |
| Patchnames: SUSE Linux Enterprise Server 12 SP2 GA krb5-1.12.5-39.1 SUSE Linux Enterprise Software Development Kit 12 SP2 GA krb5-devel-1.12.5-39.1 |
SUSE Linux Enterprise Server 12 SP3 |
| Patchnames: SUSE Linux Enterprise Server 12 SP3 GA krb5-1.12.5-39.1 SUSE Linux Enterprise Software Development Kit 12 SP3 GA krb5-devel-1.12.5-39.1 |
SUSE Linux Enterprise Server 12 SP4 |
| Patchnames: SUSE Linux Enterprise Server 12 SP4 GA krb5-1.12.5-40.28.2 SUSE Linux Enterprise Software Development Kit 12 SP4 GA krb5-devel-1.12.5-40.28.2 |
SUSE Linux Enterprise Server 12 SP5 |
| Patchnames: SUSE Linux Enterprise Server 12 SP5 GA krb5-1.12.5-40.37.7 SUSE Linux Enterprise Software Development Kit 12 SP5 GA krb5-devel-1.12.5-40.37.7 |
SUSE Linux Enterprise Server 12 |
| Patchnames: SUSE Linux Enterprise Server 12 GA krb5-1.12.1-6.2 SUSE Linux Enterprise Software Development Kit 12 GA krb5-devel-1.12.1-6.3 |
SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 |
| Patchnames: SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 GA krb5-1.12.5-39.1 |
SUSE Linux Enterprise Server for SAP Applications 12 SP1 SUSE Linux Enterprise Software Development Kit 12 SP1 |
| Patchnames: SUSE Linux Enterprise Software Development Kit 12 SP1 GA krb5-devel-1.12.1-19.1 |
SUSE Linux Enterprise Server for SAP Applications 12 SP2 SUSE Linux Enterprise Software Development Kit 12 SP2 |
| Patchnames: SUSE Linux Enterprise Software Development Kit 12 SP2 GA krb5-devel-1.12.5-39.1 |
SUSE Linux Enterprise Server for SAP Applications 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP3 |
| Patchnames: SUSE Linux Enterprise Software Development Kit 12 SP3 GA krb5-devel-1.12.5-39.1 |
SUSE Linux Enterprise Server for SAP Applications 12 SP4 SUSE Linux Enterprise Software Development Kit 12 SP4 |
| Patchnames: SUSE Linux Enterprise Software Development Kit 12 SP4 GA krb5-devel-1.12.5-40.28.2 |
SUSE Linux Enterprise Server for SAP Applications 12 SP5 SUSE Linux Enterprise Software Development Kit 12 SP5 |
| Patchnames: SUSE Linux Enterprise Software Development Kit 12 SP5 GA krb5-devel-1.12.5-40.37.7 |
SUSE Linux Enterprise Server for SAP Applications 12 SUSE Linux Enterprise Software Development Kit 12 |
| Patchnames: SUSE Linux Enterprise Software Development Kit 12 GA krb5-devel-1.12.1-6.3 |
openSUSE Leap 15.0 |
| Patchnames: openSUSE Leap 15.0 GA krb5-1.15.2-lp150.4.4 |
openSUSE Tumbleweed |
| Patchnames: openSUSE-Tumbleweed-2024-10004 |
SUSE Timeline for this CVE
CVE page created: Fri Jun 28 04:20:00 2013CVE page last modified: Mon Sep 9 17:09:47 2024