CVE-2014-4345 Integer overflow in n/a

High 8.5 Published 14 Aug 2014 Updated 6 Aug 2024

Remote authenticated users can cause denial of service or execute arbitrary code via an off-by-one error in the Kerberos LDAP KDB module.

Exploited in the wild: Not known
Login needed: Any signed-in user
Attackable: Over the internet
Victim action needed: Not needed
Fix: Available

What is CVE-2014-4345?

CVE-2014-4345 is a high-severity vulnerability in Mit Kerberos 5, published on 14 Aug 2014. Any signed-in user can exploit it over the network, with no action from the victim.

Official description

Off-by-one error in the krb5_encode_krbsecretkey function in plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c in the LDAP KDB module in kadmind in MIT Kerberos 5 (aka krb5) 1.6.x through 1.11.x before 1.11.6 and 1.12.x before 1.12.2 allows remote authenticated users to cause a denial of service (buffer overflow) or possibly execute arbitrary code via a series of "cpw -keepold" commands.

Weakness: CWE-189

Which versions are affected by CVE-2014-4345?

It affects 1 product.

Linux distribution packages (16)

`krb5` Red Hat:enterprise_linux:5::client	All versions	`0:1.6.1-80.el5_11`
`krb5-debuginfo` Red Hat:enterprise_linux:5::client	All versions	`0:1.6.1-80.el5_11`
`krb5-libs` Red Hat:enterprise_linux:5::client	All versions	`0:1.6.1-80.el5_11`
`krb5-workstation` Red Hat:enterprise_linux:5::client	All versions	`0:1.6.1-80.el5_11`
`krb5` Red Hat:enterprise_linux:5::client_workstation	All versions	`0:1.6.1-80.el5_11`
`krb5-debuginfo` Red Hat:enterprise_linux:5::client_workstation	All versions	`0:1.6.1-80.el5_11`
`krb5-devel` Red Hat:enterprise_linux:5::client_workstation	All versions	`0:1.6.1-80.el5_11`
`krb5-server` Red Hat:enterprise_linux:5::client_workstation	All versions	`0:1.6.1-80.el5_11`
`krb5-server-ldap` Red Hat:enterprise_linux:5::client_workstation	All versions	`0:1.6.1-80.el5_11`
`krb5` Red Hat:enterprise_linux:5::server	All versions	`0:1.6.1-80.el5_11`
`krb5-debuginfo` Red Hat:enterprise_linux:5::server	All versions	`0:1.6.1-80.el5_11`
`krb5-devel` Red Hat:enterprise_linux:5::server	All versions	`0:1.6.1-80.el5_11`
`krb5-libs` Red Hat:enterprise_linux:5::server	All versions	`0:1.6.1-80.el5_11`
`krb5-server` Red Hat:enterprise_linux:5::server	All versions	`0:1.6.1-80.el5_11`
`krb5-server-ldap` Red Hat:enterprise_linux:5::server	All versions	`0:1.6.1-80.el5_11`
`krb5-workstation` Red Hat:enterprise_linux:5::server	All versions	`0:1.6.1-80.el5_11`

Products include Mit Kerberos 5.

How do I fix CVE-2014-4345?

Upgrade to a fixed version.

Is CVE-2014-4345 being exploited?

There is no known exploitation of CVE-2014-4345 in the wild and no public exploit code.

All Mit Kerberos 5 vulnerabilities

Sources

Also known as DEBIAN-CVE-2014-4345, GHSA-j7xf-33rr-9jmv, RHSA-2014:1255, UBUNTU-CVE-2014-4345.