The iakerb_gss_export_sec_context function in lib/gssapi/krb5/iakerb.c in MIT Kerberos 5 (aka krb5) 1.14 pre-release 2015-09-14 improperly accesses a certain pointer, which allows remote authenticated users to cause a denial of service (memory corruption) or possibly have unspecified other impact by interacting with an application that calls the gss_export_sec_context function. NOTE: this vulnerability exists because of an incorrect fix for CVE-2015-2696.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2015-11-13T02:00:00

Updated: 2024-08-06T05:24:38.603Z

Reserved: 2015-03-24T00:00:00

Link: CVE-2015-2698

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2015-11-13T03:59:00.067

Modified: 2024-11-21T02:27:52.523

Link: CVE-2015-2698

cve-icon Redhat

Severity : Low

Publid Date: 2015-11-01T00:00:00Z

Links: CVE-2015-2698 - Bugzilla