IM
IronMonkey Threat Research

CVE-2022-42898 HIGH

Published: 2022-12-25 | Last Modified: 2025-04-14 | Status: Modified

Description

PAC parsing in MIT Kerberos 5 (aka krb5) before 1.19.4 and 1.20.x before 1.20.1 has integer overflows that may lead to remote code execution (in KDC, kadmind, or a GSS or Kerberos application server) on 32-bit platforms (which have a resultant heap-based buffer overflow), and cause a denial of service on other platforms. This occurs in krb5_pac_parse in lib/krb5/krb/pac.c. Heimdal before 7.7.1 has "a similar bug."

Additional Descriptions (1)

El análisis sintáctico de PAC en MIT Kerberos 5 (también conocido como krb5) antes de 1.19.4 y 1.20.x antes de 1.20.1 tiene desbordamientos de enteros que pueden conducir a la ejecución remota de código (en KDC, kadmind, o un servidor de aplicaciones GSS o Kerberos) en plataformas de 32 bits (que tienen un desbordamiento de búfer resultante), y causar una denegación de servicio en otras plataformas. Esto ocurre en krb5_pac_parse en lib/krb5/krb/pac.c. Heimdal antes de 7.7.1 tiene "un bug similar".

CVSS Metrics

Base Score: 8.8 (HIGH)

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack VectorNETWORK
Attack ComplexityLOW
Privileges RequiredLOW
User InteractionNONE
ScopeUNCHANGED
Confidentiality ImpactHIGH
Integrity ImpactHIGH
Availability ImpactHIGH

Source: [email protected]

Type: Primary

Exploitability Score: 2.8

Impact Score: 5.9

Weaknesses

Source Type Description
[email protected] Primary
en CWE-190
134c704f-9b21-4f2e-91b3-4a467353bcc0 Secondary
en CWE-190

Affected Products

Vendor Product Version Update Type
mit kerberos_5 * <built-in method update of dict object at 0x7fd3845ffe80> Application
mit kerberos_5 1.20 <built-in method update of dict object at 0x7fd340be4ac0> Application
mit kerberos_5 1.20 <built-in method update of dict object at 0x7fd384e0ccc0> Application
heimdal_project heimdal * <built-in method update of dict object at 0x7fd360419300> Application
samba samba * <built-in method update of dict object at 0x7fd3845ff500> Application
samba samba * <built-in method update of dict object at 0x7fd3845fdf80> Application
samba samba * <built-in method update of dict object at 0x7fd36bace080> Application

Affected Configurations

Operator: OR

Vulnerable CPE
Yes cpe:2.3:a:mit:kerberos_5:*:*:*:*:*:*:*:*
Yes cpe:2.3:a:mit:kerberos_5:1.20:-:*:*:*:*:*:*
Yes cpe:2.3:a:mit:kerberos_5:1.20:beta1:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:a:heimdal_project:heimdal:*:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:*
Yes cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:*
Yes cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:*

References