Out-of-Bounds Affecting krb5 package, versions <1.15.3-r0
Threat Intelligence
Do your applications use this vulnerable package?
In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applications- Snyk ID SNYK-ALPINE318-KRB5-5512634
- published 23 Nov 2017
- disclosed 23 Nov 2017
How to fix?
Upgrade Alpine:3.18 krb5 to version 1.15.3-r0 or higher.
NVD Description
Note: Versions mentioned in the description apply only to the upstream krb5 package and not the krb5 package as distributed by Alpine.
See How to fix? for Alpine:3.18 relevant fixed versions and status.
plugins/preauth/pkinit/pkinit_crypto_openssl.c in MIT Kerberos 5 (aka krb5) through 1.15.2 mishandles Distinguished Name (DN) fields, which allows remote attackers to execute arbitrary code or cause a denial of service (buffer overflow and application crash) in situations involving untrusted X.509 data, related to the get_matching_data and X509_NAME_oneline_ex functions. NOTE: this has security relevance only in use cases outside of the MIT Kerberos distribution, e.g., the use of get_matching_data in KDC certauth plugin code that is specific to Red Hat.
References
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15088
- https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=871698
- https://security-tracker.debian.org/tracker/CVE-2017-15088
- https://github.com/krb5/krb5/commit/fbb687db1088ddd894d975996e5f6a4252b9a2b4
- https://github.com/krb5/krb5/pull/707
- https://bugzilla.redhat.com/show_bug.cgi?id=1504045
- http://www.securityfocus.com/bid/101594
- http://people.ubuntu.com/~ubuntu-security/cve/CVE-2017-15088