Lucene search

K
ubuntucveUbuntu.comUB:CVE-2015-8631
HistoryFeb 13, 2016 - 12:00 a.m.

CVE-2015-8631

2016-02-1300:00:00
ubuntu.com
ubuntu.com
12

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:N/A:P

0.064 Low

EPSS

Percentile

93.6%

Multiple memory leaks in kadmin/server/server_stubs.c in kadmind in MIT
Kerberos 5 (aka krb5) before 1.13.4 and 1.14.x before 1.14.1 allow remote
authenticated users to cause a denial of service (memory consumption) via a
request specifying a NULL principal name.

Bugs

Notes

Author Note
ratliff use of kadmind in core and touch is not supported
OSVersionArchitecturePackageVersionFilename
ubuntu14.04noarchkrb5< 1.12+dfsg-2ubuntu5.4UNKNOWN

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:N/A:P

0.064 Low

EPSS

Percentile

93.6%