CVE-2017-15088

    Dashboard / Vulnerabilities / CVE-2017-15088

    CVE-2017-15088

    Published: 23 Nov 2017Last Modified: 8 Jul 2026

    Summary:

    Details: plugins/preauth/pkinit/pkinit_crypto_openssl.c in MIT Kerberos 5 (aka krb5) through 1.15.2 mishandles Distinguished Name (DN) fields, which allows remote attackers to execute arbitrary code or cause a denial of service (buffer overflow and application crash) in situations involving untrusted X.509 data, related to the get_matching_data and X509_NAME_oneline_ex functions. NOTE: this has security relevance only in use cases outside of the MIT Kerberos distribution, e.g., the use of get_matching_data in KDC certauth plugin code that is specific to Red Hat.

    References: http://www.securityfocus.com/bid/101594, https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=871698, https://bugzilla.redhat.com/show_bug.cgi?id=1504045, https://github.com/krb5/krb5/commit/fbb687db1088ddd894d975996e5f6a4252b9a2b4, https://github.com/krb5/krb5/pull/707

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- 0
    Fixed -None

    Affected versions

    krb5-1.15.2-final
    krb5-1.15.1-final

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2017-15088 | CVE-DB