Off-by-one error in the krb5_encode_krbsecretkey function in plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c in the LDAP KDB module in kadmind in MIT Kerberos 5 (aka krb5) 1.6.x through 1.11.x before 1.11.6 and 1.12.x before 1.12.2 allows remote authenticated users to cause a denial of service (buffer overflow) or possibly execute arbitrary code via a series of "cpw -keepold" commands.
CVSS Details
- CVSS 3.1 Base Score: 8.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade krb5-server-ldapUpgrade krb5-serverUpgrade krb5-workstationUpgrade krb5-develUpgrade krb5-libs | Dec 1, 2016 | Aug 14, 2014 |
| Debian | — | Upgrade krb5 | Jul 30, 2024 | Aug 14, 2014 |
| Gentoo Linux | — | Upgrade app-crypt/mit-krb5. | Oct 30, 2017 | Aug 14, 2014 |
| Oracle Solaris | — | Upgrade consolidation/osnet/osnet-incorporation to version 0.5.11-0.175.3.0.0.30.0 on Solaris 11.3Upgrade system/security/kerberos-5 to version 0.5.11-0.175.2.4.0.2.2 on Solaris 11.2 | May 29, 2017 | Aug 14, 2014 |
| Oracle_linux | — | Upgrade krb5-libsUpgrade krb5-server-ldapUpgrade krb5-serverUpgrade krb5-pkinitUpgrade krb5-workstationUpgrade krb5-devel | Oct 16, 2024 | Aug 14, 2014 |
| Suse | — | Upgrade krb5-apps-clientsUpgrade krb5-docUpgrade krb5-plugin-preauth-otpUpgrade krb5Upgrade krb5-32bitUpgrade krb5-devel-32bitUpgrade krb5-apps-serversUpgrade krb5-develUpgrade krb5-clientUpgrade krb5-plugin-kdb-ldapUpgrade krb5-x86Upgrade krb5-plugin-preauth-pkinitUpgrade krb5-server | Dec 18, 2015 | Aug 14, 2014 |
| Ubuntu | — | Upgrade libkrb5-3Upgrade libkdb5-6Upgrade krb5-userUpgrade libkrad0Upgrade libkdb5-4Upgrade libgssapi-krb5-2Upgrade krb5-otpUpgrade krb5-pkinitUpgrade libkadm5clnt-mit9Upgrade libkdb5-7Upgrade libk5crypto3Upgrade libkadm5srv-mit9Upgrade libkadm5clnt-mit7Upgrade krb5-kdc-ldapUpgrade krb5-admin-serverUpgrade libkadm5clnt-mit8Upgrade libkadm5srv-mit7Upgrade libkrb5support0Upgrade libkadm5srv-mit8Upgrade libgssrpc4Upgrade krb5-kdc | Nov 8, 2024 | Aug 14, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub