CVE Feed

    Dashboard / CVE / CVE-2017-7562

    CVE-2017-7562

    An authentication bypass flaw was found in the way krb5's certauth interface before 1.16.1 handled the validation of client certificates. A remote attacker able to communicate with the KDC could potentially use this flaw to impersonate arbitrary principals under rare and erroneous circumstances.

    Published:Aug 25, 2017
    Last Modified:Nov 21, 2024
    EPS:Jul 26, 2018
    EPSS Score:0.00256
    CVSS Score:6.5

    Affected Products

    Vendor
    Mit
    Product
    Kerberos 5
    Vendor
    Redhat
    Product
    Enterprise Linux
    Vendor
    Redhat
    Product
    Enterprise Linux Desktop
    Vendor
    Redhat
    Product
    Enterprise Linux Server
    Vendor
    Redhat
    Product
    Enterprise Linux Workstation

    Exploits

    No exploit reference

    Related CVEs

    CVE-2026-40356 (CVSS 5.9) — In MIT Kerberos 5 (aka krb5) before 1.22.3, there is an integer underflow and resultant out-of-bounds read if …
    CVE-2026-40355 (CVSS 5.9) — In MIT Kerberos 5 (aka krb5) before 1.22.3, there is a NULL pointer dereference if an application calls gss_ac…
    CVE-2024-37370 (CVSS 7.5) — In MIT Kerberos 5 (aka krb5) before 1.21.3, an attacker can modify the plaintext Extra Count field of a confid…
    CVE-2024-37371 (CVSS 9.1) — In MIT Kerberos 5 (aka krb5) before 1.21.3, an attacker can cause invalid memory reads during GSS message toke…
    CVE-2024-26462 (CVSS 5.5) — Kerberos 5 (aka krb5) 1.21.2 contains a memory leak vulnerability in /krb5/src/kdc/ndr.c.…
    CVE-2024-26461 (CVSS 7.5) — Kerberos 5 (aka krb5) 1.21.2 contains a memory leak vulnerability in /krb5/src/lib/gssapi/krb5/k5sealv3.c.…
    CVE-2024-26458 (CVSS 5.3) — Kerberos 5 (aka krb5) 1.21.2 contains a memory leak in /krb5/src/lib/rpc/pmap_rmt.c.…
    CVE-2025-24528 (CVSS 7.1) — In MIT Kerberos 5 (aka krb5) before 1.22 (with incremental propagation), there is an integer overflow for a la…
    CVE-2023-39975 (CVSS 8.8) — kdc/do_tgs_req.c in MIT Kerberos 5 (aka krb5) 1.21 before 1.21.2 has a double free that is reachable if an aut…
    CVE-2023-36054 (CVSS 6.5) — lib/kadm5/kadm_rpc_xdr.c in MIT Kerberos 5 (aka krb5) before 1.20.2 and 1.21.x before 1.21.1 frees an uninitia…

    References

    http://www.securityfocus.com/bid/100511
    https://access.redhat.com/errata/RHSA-2018:0666
    https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-7562
    https://github.com/krb5/krb5/pull/694
    https://github.com/krb5/krb5/pull/694/commits/1de6ca2f2eb1fdbab51f1549a25a6903aefcc196
    https://github.com/krb5/krb5/pull/694/commits/50fe4074f188c2d4da0c421e96553acea8378db2
    https://github.com/krb5/krb5/pull/694/commits/b7af544e50a4d8291524f590e20dd44430bf627d
    http://www.securityfocus.com/bid/100511
    https://access.redhat.com/errata/RHSA-2018:0666
    https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-7562
    https://github.com/krb5/krb5/pull/694
    https://github.com/krb5/krb5/pull/694/commits/1de6ca2f2eb1fdbab51f1549a25a6903aefcc196
    https://github.com/krb5/krb5/pull/694/commits/50fe4074f188c2d4da0c421e96553acea8378db2
    https://github.com/krb5/krb5/pull/694/commits/b7af544e50a4d8291524f590e20dd44430bf627d

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High