CVE-2014-4342: Debian Linux

Medium severity, CVSS 5.0. EPSS: 6.5% chance of exploitation in the next 30 days.

MIT Kerberos 5 (aka krb5) 1.7.x through 1.12.x before 1.12.2 allows remote attackers to cause a denial of service (buffer over-read or NULL pointer dereference, and application crash) by injecting invalid tokens into a GSSAPI application session.

Affected products

• Debian Debian Linux: version 7.0 only
• Mit Kerberos: version 5-1.8 only; version 5-1.10.5 only; version 5-1.10.6 only; version 5-1.10.7 only
• Mit Kerberos 5: version 1.7 only; version 1.7.1 only; version 1.8 only; version 1.8.1 only; version 1.8.2 only; version 1.8.3 only; …
• Red Hat Enterprise Linux Desktop: version 7.0 only
• Red Hat Enterprise Linux Hpc Node: version 7.0 only
• Red Hat Enterprise Linux Server: version 7.0 only
• Red Hat Enterprise Linux Workstation: version 7.0 only

Published 2014-07-20. Last modified 2026-06-17.