CVE-2014-4341: debian debian_linux Out-of-bounds Read
Vulnerability summary
CVE-2014-4341 is a medium (CVSS 5.0) Out-of-bounds Read vulnerability in debian debian_linux. EPSS estimates a 7.14% chance of exploitation in the next 30 days, higher than 94.2% of scored vulnerabilities.
Not severe (CVSS 5, network access); no exploitation reported by the 5 checked sources
Source freshness unavailable
How is this decided?Advisory lineage
Upstream 0 · Downstream 8 · Related 2Timeline
- 20-07-2014PublishedVulnerability first disclosed.
- 06-08-2024Last modifiedVulnerability information updated.
Description
MIT Kerberos 5 (aka krb5) before 1.12.2 allows remote attackers to cause a denial of service (buffer over-read and application crash) by injecting invalid tokens into a GSSAPI application session.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
7.14%
Chance of exploitation in the next 30 days
Percentile
94%
Versus all other CVEs
30-day change
No change 0.00 pp
From 7.14% on 04-10-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Known conditions: network-reachable, no authentication (CVSS vector). Other conditions: not stated in public data.
Redhat7 products
- enterprise_linux_desktop7.0
- enterprise_linux_eus7.3 | 7.4 | 7.5 | 7.6 | 7.7
- enterprise_linux_server7.0
- enterprise_linux_server_aus7.3 | 7.4 | 7.6 | 7.7
- enterprise_linux_server_eus7.3 | 7.4 | 7.6 | 7.7
Debian2 products
- krb5< 1.12.1+dfsg-4
- debian_linuxEOL7.0
Fedoraproject1 product
- fedoraEOL20
Mit1 product
- kerberos_5< 1.12.2
Ubuntu1 product
- krb5< 1.12+dfsg-2ubuntu4.2
5 vendors · 12 products
References
19 links- github.com/krb5/krb5/commit/e6ae703ae597d798e310368d52b8f38ee11c6a73X Refsource CONFIRMPatchThird Party Advisory
- lists.fedoraproject.org/pipermail/package-announce/2014-August/136360.htmlVendor AdvisoryX Refsource FEDORAThird Party Advisory
- www.mandriva.com/security/advisories?name=MDVSA-2014:165Vendor AdvisoryX Refsource MANDRIVAThird Party Advisory