The krb5_ldap_get_password_policy_from_dn function in plugins/kdb/ldap/libkdb_ldap/ldap_pwd_policy.c in MIT Kerberos 5 (aka krb5) before 1.13.1, when the KDC uses LDAP, allows remote authenticated users to cause a denial of service (daemon crash) via a successful LDAP query with no results, as demonstrated by using an incorrect object type for a password policy.
CVSS Details
- CVSS 3.1 Base Score: 6.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade krb5 | Aug 30, 2017 | Dec 16, 2014 |
| Centos_linux | — | Upgrade krb5-server-ldapUpgrade krb5-workstationUpgrade krb5-serverUpgrade krb5-libsUpgrade krb5-develUpgrade krb5-pkinit-openssl | Dec 1, 2016 | Dec 16, 2014 |
| Debian | — | Upgrade krb5 | Feb 20, 2019 | Dec 16, 2014 |
| Freebsd | — | Upgrade krb5-111Upgrade krb5Upgrade krb5-112 | Dec 10, 2025 | Feb 12, 2015 |
| Oracle Solaris | — | Upgrade consolidation/osnet/osnet-incorporation to version 0.5.11-0.175.3.0.0.30.0 on Solaris 11.3Upgrade system/kernel/security/gss to version 0.5.11-0.175.2.9.0.2.2 on Solaris 11.2Upgrade service/security/kerberos-5 to version 0.5.11-0.175.2.9.0.3.2 on Solaris 11.2Upgrade system/security/kerberos-5 to version 0.5.11-0.175.2.9.0.2.2 on Solaris 11.2 | May 29, 2017 | Dec 16, 2014 |
| Oracle_linux | — | Upgrade krb5-server-ldapUpgrade krb5-libsUpgrade krb5-pkinit-opensslUpgrade krb5-pkinitUpgrade krb5-workstationUpgrade krb5-serverUpgrade krb5-devel | Oct 16, 2024 | Dec 16, 2014 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Dec 6, 2014 |
| Suse | — | Upgrade krb5-plugin-preauth-otpUpgrade krb5-docUpgrade krb5Upgrade krb5-32bitUpgrade krb5-clientUpgrade krb5-apps-serversUpgrade krb5-apps-clientsUpgrade krb5-serverUpgrade krb5-plugin-kdb-ldapUpgrade krb5-x86Upgrade krb5-devel-32bitUpgrade krb5-plugin-preauth-pkinitUpgrade krb5-devel | Dec 18, 2015 | Dec 16, 2014 |
| Ubuntu | — | Upgrade libkadm5srv-mit9Upgrade krb5-admin-serverUpgrade libkdb5-6Upgrade libkrb5-3Upgrade libkadm5clnt-mit7Upgrade krb5-pkinitUpgrade libgssrpc4Upgrade libkrb5support0Upgrade libkdb5-4Upgrade libk5crypto3Upgrade krb5-kdcUpgrade libkdb5-7Upgrade krb5-kdc-ldapUpgrade krb5-otpUpgrade krb5-userUpgrade libkadm5clnt-mit9Upgrade libkadm5srv-mit8Upgrade libgssapi-krb5-2Upgrade libkrad0Upgrade libkadm5srv-mit7Upgrade libkadm5clnt-mit8Upgrade libkrb53 | Nov 8, 2024 | Dec 16, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub