The kg_accept_krb5 function in krb5/accept_sec_context.c in the GSS-API library in MIT Kerberos 5 (aka krb5) through 1.7.1 and 1.8 before 1.8.2, as used in kadmind and other applications, does not properly check for invalid GSS-API tokens, which allows remote authenticated users to cause a denial of service (NULL pointer dereference and daemon crash) via an AP-REQ message in which the authenticators checksum field is missing.
A NULL pointer dereference occurs when the application dereferences a pointer that it expects to be valid, but is NULL, typically causing a crash or exit.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Kerberos_5 | Mit | * | 1.7.1 (including) |
| Kerberos_5 | Mit | 1.8 (including) | 1.8.2 (excluding) |
| Extras for RHEL 4 | RedHat | java-1.6.0-sun-1:1.6.0.22-1jpp.1.el4 | * |
| Extras for RHEL 4 | RedHat | java-1.5.0-ibm-1:1.5.0.12.2-1jpp.1.el4 | * |
| Extras for RHEL 4 | RedHat | java-1.4.2-ibm-0:1.4.2.13.7-1jpp.3.el4 | * |
| Extras for RHEL 4 | RedHat | java-1.6.0-ibm-1:1.6.0.9.0-1jpp.3.el4 | * |
| Extras for RHEL 4 | RedHat | java-1.4.2-ibm-0:1.4.2.13.8-1jpp.3.el4 | * |
| Red Hat Enterprise Linux 3 | RedHat | krb5-0:1.2.7-72 | * |
| Red Hat Enterprise Linux 4 | RedHat | krb5-0:1.3.4-62.el4_8.2 | * |
| Red Hat Enterprise Linux 5 | RedHat | krb5-0:1.6.1-36.el5_5.4 | * |
| Red Hat Enterprise Linux 6 Supplementary | RedHat | java-1.5.0-ibm-1:1.5.0.12.2-1jpp.1.el6 | * |
| Red Hat Enterprise Linux 6 Supplementary | RedHat | java-1.6.0-ibm-1:1.6.0.9.0-1jpp.4.el6 | * |
| Red Hat Network Satellite Server v 5.4 | RedHat | java-1.6.0-ibm-1:1.6.0.9.1-1jpp.1.el5 | * |
| Supplementary for Red Hat Enterprise Linux 5 | RedHat | java-1.6.0-sun-1:1.6.0.22-1jpp.1.el5 | * |
| Supplementary for Red Hat Enterprise Linux 5 | RedHat | java-1.5.0-ibm-1:1.5.0.12.2-1jpp.1.el5 | * |
| Supplementary for Red Hat Enterprise Linux 5 | RedHat | java-1.4.2-ibm-0:1.4.2.13.7-1jpp.3.el5 | * |
| Supplementary for Red Hat Enterprise Linux 5 | RedHat | java-1.6.0-ibm-1:1.6.0.9.0-1jpp.3.el5 | * |
| Supplementary for Red Hat Enterprise Linux 5 | RedHat | java-1.4.2-ibm-0:1.4.2.13.8-1jpp.2.el5 | * |
| Krb5 | Ubuntu | dapper | * |
| Krb5 | Ubuntu | hardy | * |
| Krb5 | Ubuntu | jaunty | * |
| Krb5 | Ubuntu | karmic | * |
| Krb5 | Ubuntu | lucid | * |
| Krb5 | Ubuntu | upstream | * |
| Sun-jav6 | Ubuntu | hardy | * |
| Sun-jav6 | Ubuntu | jaunty | * |
| Sun-jav6 | Ubuntu | karmic | * |
| Sun-jav6 | Ubuntu | lucid | * |
| Sun-jav6 | Ubuntu | maverick | * |
| Sun-jav6 | Ubuntu | upstream | * |