CVE-2017-7562 Auth bypass in krb5
Remote attackers can impersonate arbitrary principals via a certificate validation flaw in the Kerberos KDC certauth interface.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2017-7562?
CVE-2017-7562 is a medium-severity authentication bypass vulnerability in Mit Kerberos 5, published on 26 Jul 2018. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
An authentication bypass flaw was found in the way krb5's certauth interface before 1.16.1 handled the validation of client certificates. A remote attacker able to communicate with the KDC could potentially use this flaw to impersonate arbitrary principals under rare and erroneous circumstances.
Which versions are affected by CVE-2017-7562?
It affects 5 products.
Linux distribution packages (3)
krb5 SUSE:Linux Enterprise Server 12 SP1-LTSS | All versions | 1.12.1-38.5.3 |
krb5 SUSE:Linux Enterprise Server 12-LTSS | All versions | 1.12.1-38.5.3 |
krb5 SUSE:Linux Enterprise Server for SAP Applications 12 SP1 | All versions | 1.12.1-38.5.3 |
Products include Mit Kerberos 5, Redhat Enterprise Linux, Redhat Enterprise Linux Desktop, Redhat Enterprise Linux Server, Redhat Enterprise Linux Workstation.
How do I fix CVE-2017-7562?
Upgrade to a fixed version.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2017-7562 being exploited?
There is no known exploitation of CVE-2017-7562 in the wild and no public exploit code.
Other vulnerabilities in Mit Kerberos 5
Sources
Also known as GHSA-vg8p-42hp-9g25, SUSE-SU-2018:1425-1.