CVE-2009-0844

Common Vulnerabilities and Exposures

CVE-2009-0844 at MITRE

Details

The get_input_token function in the SPNEGO implementation in MIT Kerberos 5 (aka krb5) 1.5 through 1.6.3 allows remote attackers to cause a denial of service (daemon crash) and possibly obtain sensitive information via a crafted length value that triggers a buffer over-read.

Novell Bugzilla entry: 486722

SUSE Security Advisories:

SUSE-SA:2009:019 , published Wed, 08 Apr 2009 15:00:00 +0000

Product(s)	Fixed package version(s)	References
SLES 11 DEBUGINFO	`krb5-debuginfo >= 1.6.3-133.25.1` `krb5-debugsource >= 1.6.3-133.25.1`	sle11-debuginfo. ia64 sle11-debuginfo. x86-64 sle11-debuginfo. s390x sle11-debuginfo. x86-64 sle11-debuginfo. s390x sle11-debuginfo. x86 sle11-debuginfo. ia64 sle11-debuginfo. ia64 sle11-debuginfo. x86 sle11-debuginfo. x86-64 sle11-debuginfo. x86-64 sle11-debuginfo. x86 sle11-debuginfo. x86 sle11-debuginfo. ppc sle11-debuginfo. s390x sle11-debuginfo. ppc sle11-debuginfo. ppc SAT Patch Nr: 738
SLES 11 DEBUGINFO	`krb5-debuginfo >= 1.6.3-133.25.1` `krb5-debuginfo-x86 >= 1.6.3-133.25.1` `krb5-debugsource >= 1.6.3-133.25.1`	sle11-debuginfo. ia64 sle11-debuginfo. x86-64 sle11-debuginfo. s390x sle11-debuginfo. x86-64 sle11-debuginfo. s390x sle11-debuginfo. x86 sle11-debuginfo. ia64 sle11-debuginfo. ia64 sle11-debuginfo. x86 sle11-debuginfo. x86-64 sle11-debuginfo. x86-64 sle11-debuginfo. x86 sle11-debuginfo. x86 sle11-debuginfo. ppc sle11-debuginfo. s390x sle11-debuginfo. ppc sle11-debuginfo. ppc SAT Patch Nr: 738
SLES 11 DEBUGINFO	`krb5-debuginfo >= 1.6.3-133.25.1` `krb5-debuginfo-32bit >= 1.6.3-133.25.1` `krb5-debugsource >= 1.6.3-133.25.1`	sle11-debuginfo. ia64 sle11-debuginfo. x86-64 sle11-debuginfo. s390x sle11-debuginfo. x86-64 sle11-debuginfo. s390x sle11-debuginfo. x86 sle11-debuginfo. ia64 sle11-debuginfo. ia64 sle11-debuginfo. x86 sle11-debuginfo. x86-64 sle11-debuginfo. x86-64 sle11-debuginfo. x86 sle11-debuginfo. x86 sle11-debuginfo. ppc sle11-debuginfo. s390x sle11-debuginfo. ppc sle11-debuginfo. ppc SAT Patch Nr: 738
SLE 11	`krb5-devel >= 1.6.3-133.25.1` `krb5-server >= 1.6.3-133.25.1`	sle11-debuginfo. ia64 sle11-debuginfo. x86-64 sle11-debuginfo. s390x sle11-debuginfo. x86-64 sle11-debuginfo. s390x sle11-debuginfo. x86 sle11-debuginfo. ia64 sle11-debuginfo. ia64 sle11-debuginfo. x86 sle11-debuginfo. x86-64 sle11-debuginfo. x86-64 sle11-debuginfo. x86 sle11-debuginfo. x86 sle11-debuginfo. ppc sle11-debuginfo. s390x sle11-debuginfo. ppc sle11-debuginfo. ppc SAT Patch Nr: 738
SLE 11	`krb5-devel >= 1.6.3-133.25.1`	sle11-debuginfo. ia64 sle11-debuginfo. x86-64 sle11-debuginfo. s390x sle11-debuginfo. x86-64 sle11-debuginfo. s390x sle11-debuginfo. x86 sle11-debuginfo. ia64 sle11-debuginfo. ia64 sle11-debuginfo. x86 sle11-debuginfo. x86-64 sle11-debuginfo. x86-64 sle11-debuginfo. x86 sle11-debuginfo. x86 sle11-debuginfo. ppc sle11-debuginfo. s390x sle11-debuginfo. ppc sle11-debuginfo. ppc SAT Patch Nr: 738
SLE 11	`krb5-devel >= 1.6.3-133.25.1` `krb5-devel-32bit >= 1.6.3-133.25.1`	sle11-debuginfo. ia64 sle11-debuginfo. x86-64 sle11-debuginfo. s390x sle11-debuginfo. x86-64 sle11-debuginfo. s390x sle11-debuginfo. x86 sle11-debuginfo. ia64 sle11-debuginfo. ia64 sle11-debuginfo. x86 sle11-debuginfo. x86-64 sle11-debuginfo. x86-64 sle11-debuginfo. x86 sle11-debuginfo. x86 sle11-debuginfo. ppc sle11-debuginfo. s390x sle11-debuginfo. ppc sle11-debuginfo. ppc SAT Patch Nr: 738
SLE 11	`krb5-devel >= 1.6.3-133.25.1` `krb5-devel-32bit >= 1.6.3-133.25.1` `krb5-server >= 1.6.3-133.25.1`	sle11-debuginfo. ia64 sle11-debuginfo. x86-64 sle11-debuginfo. s390x sle11-debuginfo. x86-64 sle11-debuginfo. s390x sle11-debuginfo. x86 sle11-debuginfo. ia64 sle11-debuginfo. ia64 sle11-debuginfo. x86 sle11-debuginfo. x86-64 sle11-debuginfo. x86-64 sle11-debuginfo. x86 sle11-debuginfo. x86 sle11-debuginfo. ppc sle11-debuginfo. s390x sle11-debuginfo. ppc sle11-debuginfo. ppc SAT Patch Nr: 738
SLED 11	`krb5 >= 1.6.3-133.25.1` `krb5-client >= 1.6.3-133.25.1`	sle11-debuginfo. ia64 sle11-debuginfo. x86-64 sle11-debuginfo. s390x sle11-debuginfo. x86-64 sle11-debuginfo. s390x sle11-debuginfo. x86 sle11-debuginfo. ia64 sle11-debuginfo. ia64 sle11-debuginfo. x86 sle11-debuginfo. x86-64 sle11-debuginfo. x86-64 sle11-debuginfo. x86 sle11-debuginfo. x86 sle11-debuginfo. ppc sle11-debuginfo. s390x sle11-debuginfo. ppc sle11-debuginfo. ppc SAT Patch Nr: 738
SLED 11	`krb5 >= 1.6.3-133.25.1` `krb5-32bit >= 1.6.3-133.25.1` `krb5-client >= 1.6.3-133.25.1`	sle11-debuginfo. ia64 sle11-debuginfo. x86-64 sle11-debuginfo. s390x sle11-debuginfo. x86-64 sle11-debuginfo. s390x sle11-debuginfo. x86 sle11-debuginfo. ia64 sle11-debuginfo. ia64 sle11-debuginfo. x86 sle11-debuginfo. x86-64 sle11-debuginfo. x86-64 sle11-debuginfo. x86 sle11-debuginfo. x86 sle11-debuginfo. ppc sle11-debuginfo. s390x sle11-debuginfo. ppc sle11-debuginfo. ppc SAT Patch Nr: 738
SLES 11	`krb5 >= 1.6.3-133.25.1` `krb5-apps-clients >= 1.6.3-133.25.1` `krb5-apps-servers >= 1.6.3-133.25.1` `krb5-client >= 1.6.3-133.25.1` `krb5-server >= 1.6.3-133.25.1`	sle11-debuginfo. ia64 sle11-debuginfo. x86-64 sle11-debuginfo. s390x sle11-debuginfo. x86-64 sle11-debuginfo. s390x sle11-debuginfo. x86 sle11-debuginfo. ia64 sle11-debuginfo. ia64 sle11-debuginfo. x86 sle11-debuginfo. x86-64 sle11-debuginfo. x86-64 sle11-debuginfo. x86 sle11-debuginfo. x86 sle11-debuginfo. ppc sle11-debuginfo. s390x sle11-debuginfo. ppc sle11-debuginfo. ppc SAT Patch Nr: 738
SLES 11	`krb5 >= 1.6.3-133.25.1` `krb5-apps-clients >= 1.6.3-133.25.1` `krb5-apps-servers >= 1.6.3-133.25.1` `krb5-client >= 1.6.3-133.25.1` `krb5-server >= 1.6.3-133.25.1` `krb5-x86 >= 1.6.3-133.25.1`	sle11-debuginfo. ia64 sle11-debuginfo. x86-64 sle11-debuginfo. s390x sle11-debuginfo. x86-64 sle11-debuginfo. s390x sle11-debuginfo. x86 sle11-debuginfo. ia64 sle11-debuginfo. ia64 sle11-debuginfo. x86 sle11-debuginfo. x86-64 sle11-debuginfo. x86-64 sle11-debuginfo. x86 sle11-debuginfo. x86 sle11-debuginfo. ppc sle11-debuginfo. s390x sle11-debuginfo. ppc sle11-debuginfo. ppc SAT Patch Nr: 738
SLES 11	`krb5 >= 1.6.3-133.25.1` `krb5-32bit >= 1.6.3-133.25.1` `krb5-apps-clients >= 1.6.3-133.25.1` `krb5-apps-servers >= 1.6.3-133.25.1` `krb5-client >= 1.6.3-133.25.1` `krb5-server >= 1.6.3-133.25.1`	sle11-debuginfo. ia64 sle11-debuginfo. x86-64 sle11-debuginfo. s390x sle11-debuginfo. x86-64 sle11-debuginfo. s390x sle11-debuginfo. x86 sle11-debuginfo. ia64 sle11-debuginfo. ia64 sle11-debuginfo. x86 sle11-debuginfo. x86-64 sle11-debuginfo. x86-64 sle11-debuginfo. x86 sle11-debuginfo. x86 sle11-debuginfo. ppc sle11-debuginfo. s390x sle11-debuginfo. ppc sle11-debuginfo. ppc SAT Patch Nr: 738
openSUSE 10.3	`krb5 >= 1.6.2-22.9` `krb5-32bit >= 1.6.2-22.9` `krb5-64bit >= 1.6.2-22.9` `krb5-apps-clients >= 1.6.2-22.9` `krb5-apps-servers >= 1.6.2-22.9` `krb5-client >= 1.6.2-22.9` `krb5-devel >= 1.6.2-22.9` `krb5-devel-32bit >= 1.6.2-22.9` `krb5-devel-64bit >= 1.6.2-22.9` `krb5-server >= 1.6.2-22.9`	ZYPP Patch Nr: 6139 SAT Patch Nr: 740
openSUSE 11.0	`krb5-debuginfo >= 1.6.3-50.5` `krb5-debugsource >= 1.6.3-50.5`	ZYPP Patch Nr: 6139 SAT Patch Nr: 740
openSUSE 11.0	`krb5 >= 1.6.3-50.5` `krb5-32bit >= 1.6.3-50.5` `krb5-64bit >= 1.6.3-50.5` `krb5-apps-clients >= 1.6.3-50.5` `krb5-apps-servers >= 1.6.3-50.5` `krb5-client >= 1.6.3-50.5` `krb5-devel >= 1.6.3-50.5` `krb5-devel-32bit >= 1.6.3-50.5` `krb5-devel-64bit >= 1.6.3-50.5` `krb5-server >= 1.6.3-50.5`	ZYPP Patch Nr: 6139 SAT Patch Nr: 740
openSUSE 11.1	`krb5-debuginfo >= 1.6.3-132.5.1` `krb5-debuginfo-32bit >= 1.6.3-132.5.1` `krb5-debuginfo-64bit >= 1.6.3-132.5.1` `krb5-debugsource >= 1.6.3-132.5.1`	ZYPP Patch Nr: 6139 SAT Patch Nr: 740
openSUSE 11.1	`krb5 >= 1.6.3-132.5.1` `krb5-32bit >= 1.6.3-132.5.1` `krb5-64bit >= 1.6.3-132.5.1` `krb5-apps-clients >= 1.6.3-132.5.1` `krb5-apps-servers >= 1.6.3-132.5.1` `krb5-client >= 1.6.3-132.5.1` `krb5-devel >= 1.6.3-132.5.1` `krb5-devel-32bit >= 1.6.3-132.5.1` `krb5-devel-64bit >= 1.6.3-132.5.1` `krb5-server >= 1.6.3-132.5.1`	ZYPP Patch Nr: 6139 SAT Patch Nr: 740
SUSE Linux Enterprise Desktop 10 SP2 for x86	`krb5 >= 1.4.3-19.41` `krb5-client >= 1.4.3-19.41` `krb5-devel >= 1.4.3-19.41`	sles10-sp2-debuginfo. s390x sles10-sp2-debuginfo. ppc sles10-sp2. x86-64 sled10-sp2. x86-64 sles10-sp2-debuginfo. ia64 sles10-sp2-sdk. ppc sles10-sp2-sdk. x86-64 sles10-sp2-debuginfo. x86 sles10-sp2-sdk. x86 sles10-sp2-sdk. ia64 sles10-sp2. s390x sled10-sp2. x86 sles10-sp2. ppc sles10-sp2. ia64 sles10-sp2. x86 sles10-sp2-sdk. s390x sles10-sp2-debuginfo. x86-64 ZYPP Patch Nr: 6140
SUSE Linux Enterprise Desktop 10 SP2 for AMD64 and Intel EM64T	`krb5 >= 1.4.3-19.41` `krb5-32bit >= 1.4.3-19.41` `krb5-client >= 1.4.3-19.41` `krb5-devel >= 1.4.3-19.41` `krb5-devel-32bit >= 1.4.3-19.41`	sles10-sp2-debuginfo. s390x sles10-sp2-debuginfo. ppc sles10-sp2. x86-64 sled10-sp2. x86-64 sles10-sp2-debuginfo. ia64 sles10-sp2-sdk. ppc sles10-sp2-sdk. x86-64 sles10-sp2-debuginfo. x86 sles10-sp2-sdk. x86 sles10-sp2-sdk. ia64 sles10-sp2. s390x sled10-sp2. x86 sles10-sp2. ppc sles10-sp2. ia64 sles10-sp2. x86 sles10-sp2-sdk. s390x sles10-sp2-debuginfo. x86-64 ZYPP Patch Nr: 6140
SUSE Linux Enterprise 10 SP2 DEBUGINFO for AMD64 and Intel EM64T SUSE Linux Enterprise 10 SP2 DEBUGINFO for IBM POWER SUSE Linux Enterprise 10 SP2 DEBUGINFO for IBM zSeries 64bit SUSE Linux Enterprise 10 SP2 DEBUGINFO for IPF SUSE Linux Enterprise 10 SP2 DEBUGINFO for x86	`krb5-debuginfo >= 1.4.3-19.41`	sles10-sp2-debuginfo. s390x sles10-sp2-debuginfo. ppc sles10-sp2. x86-64 sled10-sp2. x86-64 sles10-sp2-debuginfo. ia64 sles10-sp2-sdk. ppc sles10-sp2-sdk. x86-64 sles10-sp2-debuginfo. x86 sles10-sp2-sdk. x86 sles10-sp2-sdk. ia64 sles10-sp2. s390x sled10-sp2. x86 sles10-sp2. ppc sles10-sp2. ia64 sles10-sp2. x86 sles10-sp2-sdk. s390x sles10-sp2-debuginfo. x86-64 ZYPP Patch Nr: 6140
SLE SDK 10 SP2 for IBM iSeries and IBM pSeries SLE SDK 10 SP2 for IBM zSeries SLE SDK 10 SP2 for IPF SLE SDK 10 SP2 for X86-64 SLE SDK 10 SP2 for x86	`krb5-apps-clients >= 1.4.3-19.41` `krb5-apps-servers >= 1.4.3-19.41` `krb5-server >= 1.4.3-19.41`	sles10-sp2-debuginfo. s390x sles10-sp2-debuginfo. ppc sles10-sp2. x86-64 sled10-sp2. x86-64 sles10-sp2-debuginfo. ia64 sles10-sp2-sdk. ppc sles10-sp2-sdk. x86-64 sles10-sp2-debuginfo. x86 sles10-sp2-sdk. x86 sles10-sp2-sdk. ia64 sles10-sp2. s390x sled10-sp2. x86 sles10-sp2. ppc sles10-sp2. ia64 sles10-sp2. x86 sles10-sp2-sdk. s390x sles10-sp2-debuginfo. x86-64 ZYPP Patch Nr: 6140
SUSE Linux Enterprise Server 10 SP2 for x86	`krb5 >= 1.4.3-19.41` `krb5-apps-clients >= 1.4.3-19.41` `krb5-apps-servers >= 1.4.3-19.41` `krb5-client >= 1.4.3-19.41` `krb5-devel >= 1.4.3-19.41` `krb5-server >= 1.4.3-19.41`	sles10-sp2-debuginfo. s390x sles10-sp2-debuginfo. ppc sles10-sp2. x86-64 sled10-sp2. x86-64 sles10-sp2-debuginfo. ia64 sles10-sp2-sdk. ppc sles10-sp2-sdk. x86-64 sles10-sp2-debuginfo. x86 sles10-sp2-sdk. x86 sles10-sp2-sdk. ia64 sles10-sp2. s390x sled10-sp2. x86 sles10-sp2. ppc sles10-sp2. ia64 sles10-sp2. x86 sles10-sp2-sdk. s390x sles10-sp2-debuginfo. x86-64 ZYPP Patch Nr: 6140
SUSE Linux Enterprise Server 10 SP2 for IPF	`krb5 >= 1.4.3-19.41` `krb5-apps-clients >= 1.4.3-19.41` `krb5-apps-servers >= 1.4.3-19.41` `krb5-client >= 1.4.3-19.41` `krb5-devel >= 1.4.3-19.41` `krb5-server >= 1.4.3-19.41` `krb5-x86 >= 1.4.3-19.41`	sles10-sp2-debuginfo. s390x sles10-sp2-debuginfo. ppc sles10-sp2. x86-64 sled10-sp2. x86-64 sles10-sp2-debuginfo. ia64 sles10-sp2-sdk. ppc sles10-sp2-sdk. x86-64 sles10-sp2-debuginfo. x86 sles10-sp2-sdk. x86 sles10-sp2-sdk. ia64 sles10-sp2. s390x sled10-sp2. x86 sles10-sp2. ppc sles10-sp2. ia64 sles10-sp2. x86 sles10-sp2-sdk. s390x sles10-sp2-debuginfo. x86-64 ZYPP Patch Nr: 6140
SUSE Linux Enterprise Server 10 SP2 for IBM POWER	`krb5 >= 1.4.3-19.41` `krb5-64bit >= 1.4.3-19.41` `krb5-apps-clients >= 1.4.3-19.41` `krb5-apps-servers >= 1.4.3-19.41` `krb5-client >= 1.4.3-19.41` `krb5-devel >= 1.4.3-19.41` `krb5-devel-64bit >= 1.4.3-19.41` `krb5-server >= 1.4.3-19.41`	sles10-sp2-debuginfo. s390x sles10-sp2-debuginfo. ppc sles10-sp2. x86-64 sled10-sp2. x86-64 sles10-sp2-debuginfo. ia64 sles10-sp2-sdk. ppc sles10-sp2-sdk. x86-64 sles10-sp2-debuginfo. x86 sles10-sp2-sdk. x86 sles10-sp2-sdk. ia64 sles10-sp2. s390x sled10-sp2. x86 sles10-sp2. ppc sles10-sp2. ia64 sles10-sp2. x86 sles10-sp2-sdk. s390x sles10-sp2-debuginfo. x86-64 ZYPP Patch Nr: 6140
SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T SUSE Linux Enterprise Server 10 SP2 for IBM zSeries 64bit	`krb5 >= 1.4.3-19.41` `krb5-32bit >= 1.4.3-19.41` `krb5-apps-clients >= 1.4.3-19.41` `krb5-apps-servers >= 1.4.3-19.41` `krb5-client >= 1.4.3-19.41` `krb5-devel >= 1.4.3-19.41` `krb5-devel-32bit >= 1.4.3-19.41` `krb5-server >= 1.4.3-19.41`	sles10-sp2-debuginfo. s390x sles10-sp2-debuginfo. ppc sles10-sp2. x86-64 sled10-sp2. x86-64 sles10-sp2-debuginfo. ia64 sles10-sp2-sdk. ppc sles10-sp2-sdk. x86-64 sles10-sp2-debuginfo. x86 sles10-sp2-sdk. x86 sles10-sp2-sdk. ia64 sles10-sp2. s390x sled10-sp2. x86 sles10-sp2. ppc sles10-sp2. ia64 sles10-sp2. x86 sles10-sp2-sdk. s390x sles10-sp2-debuginfo. x86-64 ZYPP Patch Nr: 6140