Upstream information

CVE-2011-0285 at MITRE

Description

The process_chpw_request function in schpw.c in the password-changing functionality in kadmind in MIT Kerberos 5 (aka krb5) 1.7 through 1.9 frees an invalid pointer, which allows remote attackers to execute arbitrary code or cause a denial of service (daemon crash) via a crafted request that triggers an error condition.

SUSE information

Overall state of this security issue: Resolved

This issue is currently rated as having critical severity.

CVSS v2 Scores
  National Vulnerability Database
Base Score 10
Vector AV:N/AC:L/Au:N/C:C/I:C/A:C
Access Vector Network
Access Complexity Low
Authentication None
Confidentiality Impact Complete
Integrity Impact Complete
Availability Impact Complete
SUSE Bugzilla entry: 687469 [RESOLVED / FIXED]

SUSE Security Advisories:

  • SUSE-SR:2011:007, published Tue, 19 Apr 2011 12:00:00 +0000
    • openSUSE-SU-2011:0348-1

List of released packages

Product(s) Fixed package version(s) References
SUSE Linux Enterprise Desktop 12 SP1
  • krb5 >= 1.12.1-19.1
  • krb5-32bit >= 1.12.1-19.1
  • krb5-client >= 1.12.1-19.1
  • krb5-devel >= 1.12.1-19.1
 Patchnames:
SUSE Linux Enterprise Desktop 12 SP1 GA krb5-1.12.1-19.1
SUSE Linux Enterprise Software Development Kit 12 SP1 GA krb5-devel-1.12.1-19.1
SUSE Linux Enterprise Desktop 12 SP2
  • krb5 >= 1.12.5-39.1
  • krb5-32bit >= 1.12.5-39.1
  • krb5-client >= 1.12.5-39.1
  • krb5-devel >= 1.12.5-39.1
 Patchnames:
SUSE Linux Enterprise Desktop 12 SP2 GA krb5-1.12.5-39.1
SUSE Linux Enterprise Software Development Kit 12 SP2 GA krb5-devel-1.12.5-39.1
SUSE Linux Enterprise Desktop 12 SP3
  • krb5 >= 1.12.5-39.1
  • krb5-32bit >= 1.12.5-39.1
  • krb5-client >= 1.12.5-39.1
  • krb5-devel >= 1.12.5-39.1
 Patchnames:
SUSE Linux Enterprise Desktop 12 SP3 GA krb5-1.12.5-39.1
SUSE Linux Enterprise Software Development Kit 12 SP3 GA krb5-devel-1.12.5-39.1
SUSE Linux Enterprise Desktop 12 SP4
  • krb5 >= 1.12.5-40.28.2
  • krb5-32bit >= 1.12.5-40.28.2
  • krb5-client >= 1.12.5-40.28.2
  • krb5-devel >= 1.12.5-40.28.2
 Patchnames:
SUSE Linux Enterprise Desktop 12 SP4 GA krb5-1.12.5-40.28.2
SUSE Linux Enterprise Software Development Kit 12 SP4 GA krb5-devel-1.12.5-40.28.2
SUSE Linux Enterprise Desktop 12
  • krb5 >= 1.12.1-6.3
  • krb5-32bit >= 1.12.1-6.3
  • krb5-client >= 1.12.1-6.3
  • krb5-devel >= 1.12.1-6.3
 Patchnames:
SUSE Linux Enterprise Desktop 12 GA krb5-1.12.1-6.3
SUSE Linux Enterprise Software Development Kit 12 GA krb5-devel-1.12.1-6.3
SUSE Linux Enterprise Desktop 15
SUSE Linux Enterprise Module for Basesystem 15
  • krb5 >= 1.15.2-4.25
  • krb5-32bit >= 1.15.2-4.25
  • krb5-client >= 1.15.2-4.25
  • krb5-devel >= 1.15.2-4.25
  • krb5-plugin-preauth-otp >= 1.15.2-4.25
  • krb5-plugin-preauth-pkinit >= 1.15.2-4.25
 Patchnames:
SUSE Linux Enterprise Module for Basesystem 15 GA krb5-1.15.2-4.25
SUSE Linux Enterprise High Performance Computing 12 SP5
  • krb5 >= 1.12.5-40.37.7
  • krb5-32bit >= 1.12.5-40.37.7
  • krb5-client >= 1.12.5-40.37.7
  • krb5-doc >= 1.12.5-40.37.7
  • krb5-plugin-kdb-ldap >= 1.12.5-40.37.7
  • krb5-plugin-preauth-otp >= 1.12.5-40.37.7
  • krb5-plugin-preauth-pkinit >= 1.12.5-40.37.7
  • krb5-server >= 1.12.5-40.37.7
 Patchnames:
SUSE Linux Enterprise High Performance Computing 12 SP5 GA krb5-1.12.5-40.37.7
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise Server for SAP Applications 15
  • krb5 >= 1.15.2-4.25
  • krb5-32bit >= 1.15.2-4.25
  • krb5-client >= 1.15.2-4.25
  • krb5-devel >= 1.15.2-4.25
  • krb5-plugin-kdb-ldap >= 1.15.2-4.25
  • krb5-plugin-preauth-otp >= 1.15.2-4.25
  • krb5-plugin-preauth-pkinit >= 1.15.2-4.25
  • krb5-server >= 1.15.2-4.25
 Patchnames:
SUSE Linux Enterprise Module for Basesystem 15 GA krb5-1.15.2-4.25
SUSE Linux Enterprise Module for Server Applications 15 GA krb5-plugin-kdb-ldap-1.15.2-4.25
SUSE Linux Enterprise Micro 6.0
  • krb5 >= 1.20.1-4.11
 Patchnames:
SUSE Linux Enterprise Micro 6.0 GA krb5-1.20.1-4.11
SUSE Linux Enterprise Micro 6.1
  • krb5 >= 1.21.3-slfo.1.1_1.2
 Patchnames:
SUSE Linux Enterprise Micro 6.1 GA krb5-1.21.3-slfo.1.1_1.2
SUSE Linux Enterprise Module for Server Applications 15
  • krb5-plugin-kdb-ldap >= 1.15.2-4.25
  • krb5-server >= 1.15.2-4.25
 Patchnames:
SUSE Linux Enterprise Module for Server Applications 15 GA krb5-plugin-kdb-ldap-1.15.2-4.25
SUSE Linux Enterprise Server 12 SP1
  • krb5 >= 1.12.1-19.1
  • krb5-32bit >= 1.12.1-19.1
  • krb5-client >= 1.12.1-19.1
  • krb5-devel >= 1.12.1-19.1
  • krb5-doc >= 1.12.1-19.1
  • krb5-plugin-kdb-ldap >= 1.12.1-19.1
  • krb5-plugin-preauth-otp >= 1.12.1-19.1
  • krb5-plugin-preauth-pkinit >= 1.12.1-19.1
  • krb5-server >= 1.12.1-19.1
 Patchnames:
SUSE Linux Enterprise Server 12 SP1 GA krb5-1.12.1-19.1
SUSE Linux Enterprise Software Development Kit 12 SP1 GA krb5-devel-1.12.1-19.1
SUSE Linux Enterprise Server 12 SP2
  • krb5 >= 1.12.5-39.1
  • krb5-32bit >= 1.12.5-39.1
  • krb5-client >= 1.12.5-39.1
  • krb5-devel >= 1.12.5-39.1
  • krb5-doc >= 1.12.5-39.1
  • krb5-plugin-kdb-ldap >= 1.12.5-39.1
  • krb5-plugin-preauth-otp >= 1.12.5-39.1
  • krb5-plugin-preauth-pkinit >= 1.12.5-39.1
  • krb5-server >= 1.12.5-39.1
 Patchnames:
SUSE Linux Enterprise Server 12 SP2 GA krb5-1.12.5-39.1
SUSE Linux Enterprise Software Development Kit 12 SP2 GA krb5-devel-1.12.5-39.1
SUSE Linux Enterprise Server 12 SP3
  • krb5 >= 1.12.5-39.1
  • krb5-32bit >= 1.12.5-39.1
  • krb5-client >= 1.12.5-39.1
  • krb5-devel >= 1.12.5-39.1
  • krb5-doc >= 1.12.5-39.1
  • krb5-plugin-kdb-ldap >= 1.12.5-39.1
  • krb5-plugin-preauth-otp >= 1.12.5-39.1
  • krb5-plugin-preauth-pkinit >= 1.12.5-39.1
  • krb5-server >= 1.12.5-39.1
 Patchnames:
SUSE Linux Enterprise Server 12 SP3 GA krb5-1.12.5-39.1
SUSE Linux Enterprise Software Development Kit 12 SP3 GA krb5-devel-1.12.5-39.1
SUSE Linux Enterprise Server 12 SP4
  • krb5 >= 1.12.5-40.28.2
  • krb5-32bit >= 1.12.5-40.28.2
  • krb5-client >= 1.12.5-40.28.2
  • krb5-devel >= 1.12.5-40.28.2
  • krb5-doc >= 1.12.5-40.28.2
  • krb5-plugin-kdb-ldap >= 1.12.5-40.28.2
  • krb5-plugin-preauth-otp >= 1.12.5-40.28.2
  • krb5-plugin-preauth-pkinit >= 1.12.5-40.28.2
  • krb5-server >= 1.12.5-40.28.2
 Patchnames:
SUSE Linux Enterprise Server 12 SP4 GA krb5-1.12.5-40.28.2
SUSE Linux Enterprise Software Development Kit 12 SP4 GA krb5-devel-1.12.5-40.28.2
SUSE Linux Enterprise Server 12 SP5
  • krb5 >= 1.12.5-40.37.7
  • krb5-32bit >= 1.12.5-40.37.7
  • krb5-client >= 1.12.5-40.37.7
  • krb5-devel >= 1.12.5-40.37.7
  • krb5-doc >= 1.12.5-40.37.7
  • krb5-plugin-kdb-ldap >= 1.12.5-40.37.7
  • krb5-plugin-preauth-otp >= 1.12.5-40.37.7
  • krb5-plugin-preauth-pkinit >= 1.12.5-40.37.7
  • krb5-server >= 1.12.5-40.37.7
 Patchnames:
SUSE Linux Enterprise Server 12 SP5 GA krb5-1.12.5-40.37.7
SUSE Linux Enterprise Software Development Kit 12 SP5 GA krb5-devel-1.12.5-40.37.7
SUSE Linux Enterprise Server 12
  • krb5 >= 1.12.1-6.3
  • krb5-32bit >= 1.12.1-6.3
  • krb5-client >= 1.12.1-6.3
  • krb5-devel >= 1.12.1-6.3
  • krb5-doc >= 1.12.1-6.3
  • krb5-plugin-kdb-ldap >= 1.12.1-6.3
  • krb5-plugin-preauth-otp >= 1.12.1-6.3
  • krb5-plugin-preauth-pkinit >= 1.12.1-6.3
  • krb5-server >= 1.12.1-6.3
 Patchnames:
SUSE Linux Enterprise Server 12 GA krb5-1.12.1-6.2
SUSE Linux Enterprise Software Development Kit 12 GA krb5-devel-1.12.1-6.3
SUSE Linux Enterprise Server for Raspberry Pi 12 SP2
  • krb5 >= 1.12.5-39.1
  • krb5-client >= 1.12.5-39.1
  • krb5-doc >= 1.12.5-39.1
  • krb5-plugin-kdb-ldap >= 1.12.5-39.1
  • krb5-plugin-preauth-otp >= 1.12.5-39.1
  • krb5-plugin-preauth-pkinit >= 1.12.5-39.1
  • krb5-server >= 1.12.5-39.1
 Patchnames:
SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 GA krb5-1.12.5-39.1
SUSE Linux Enterprise Server for SAP Applications 12 SP1
SUSE Linux Enterprise Software Development Kit 12 SP1
  • krb5-devel >= 1.12.1-19.1
 Patchnames:
SUSE Linux Enterprise Software Development Kit 12 SP1 GA krb5-devel-1.12.1-19.1
SUSE Linux Enterprise Server for SAP Applications 12 SP2
SUSE Linux Enterprise Software Development Kit 12 SP2
  • krb5-devel >= 1.12.5-39.1
 Patchnames:
SUSE Linux Enterprise Software Development Kit 12 SP2 GA krb5-devel-1.12.5-39.1
SUSE Linux Enterprise Server for SAP Applications 12 SP3
SUSE Linux Enterprise Software Development Kit 12 SP3
  • krb5-devel >= 1.12.5-39.1
 Patchnames:
SUSE Linux Enterprise Software Development Kit 12 SP3 GA krb5-devel-1.12.5-39.1
SUSE Linux Enterprise Server for SAP Applications 12 SP4
SUSE Linux Enterprise Software Development Kit 12 SP4
  • krb5-devel >= 1.12.5-40.28.2
 Patchnames:
SUSE Linux Enterprise Software Development Kit 12 SP4 GA krb5-devel-1.12.5-40.28.2
SUSE Linux Enterprise Server for SAP Applications 12 SP5
SUSE Linux Enterprise Software Development Kit 12 SP5
  • krb5-devel >= 1.12.5-40.37.7
 Patchnames:
SUSE Linux Enterprise Software Development Kit 12 SP5 GA krb5-devel-1.12.5-40.37.7
SUSE Linux Enterprise Server for SAP Applications 12
SUSE Linux Enterprise Software Development Kit 12
  • krb5-devel >= 1.12.1-6.3
 Patchnames:
SUSE Linux Enterprise Software Development Kit 12 GA krb5-devel-1.12.1-6.3
openSUSE Leap 15.0
  • krb5 >= 1.15.2-lp150.4.4
  • krb5-32bit >= 1.15.2-lp150.4.4
  • krb5-server >= 1.15.2-lp150.4.4
 Patchnames:
openSUSE Leap 15.0 GA krb5-1.15.2-lp150.4.4
openSUSE Tumbleweed
  • krb5 >= 1.15-1.1
  • krb5-32bit >= 1.15-1.1
  • krb5-client >= 1.15-1.1
  • krb5-devel >= 1.15-1.1
  • krb5-devel-32bit >= 1.15-1.1
  • krb5-doc >= 1.15-1.1
  • krb5-mini >= 1.15-1.1
  • krb5-mini-devel >= 1.15-1.1
  • krb5-plugin-kdb-ldap >= 1.15-1.1
  • krb5-plugin-preauth-otp >= 1.15-1.1
  • krb5-plugin-preauth-pkinit >= 1.15-1.1
  • krb5-server >= 1.15-1.1
 Patchnames:
openSUSE-Tumbleweed-2024-10004

SUSE Timeline for this CVE

CVE page created: Fri Jun 28 04:20:00 2013
CVE page last modified: Sat Nov 23 13:17:36 2024