CVE-2015-2695

Name of the Vulnerable Software and Affected Versions MIT Kerberos 5 versions prior to 1.14

Description The issue allows remote attackers to cause a denial of service, resulting in an incorrect pointer read and process crash. This is achieved by sending a crafted SPNEGO packet that is mishandled during a gss inquire context call.

Recommendations For versions prior to 1.14, update to version 1.14 or later to resolve the issue. As a temporary workaround, consider restricting access to the gss inquire context call to minimize the risk of exploitation.