Off-by-one error in the krb5_encode_krbsecretkey function in plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c in the LDAP KDB module in kadmind in MIT Kerberos 5 (aka krb5) 1.6.x through 1.11.x before 1.11.6 and 1.12.x before 1.12.2 allows remote authenticated users to cause a denial of service (buffer overflow) or possibly execute arbitrary code via a series of "cpw -keepold" commands.
CVSS Details
- CVSS 3.1 Base Score: 8.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade krb5-libsUpgrade krb5-develUpgrade krb5-serverUpgrade krb5-workstationUpgrade krb5-server-ldap | Dec 1, 2016 | Aug 14, 2014 |
| Debian | — | Upgrade krb5 | Jul 30, 2024 | Aug 14, 2014 |
| Gentoo Linux | — | Upgrade app-crypt/mit-krb5. | Oct 30, 2017 | Aug 14, 2014 |
| Oracle Solaris | — | Upgrade consolidation/osnet/osnet-incorporation to version 0.5.11-0.175.3.0.0.30.0 on Solaris 11.3Upgrade system/security/kerberos-5 to version 0.5.11-0.175.2.4.0.2.2 on Solaris 11.2 | May 29, 2017 | Aug 14, 2014 |
| Oracle_linux | — | Upgrade krb5-server-ldapUpgrade krb5-serverUpgrade krb5-develUpgrade krb5-pkinitUpgrade krb5-workstationUpgrade krb5-libs | Oct 16, 2024 | Aug 14, 2014 |
| Suse | — | Upgrade krb5-32bitUpgrade krb5-plugin-preauth-otpUpgrade krb5-apps-serversUpgrade krb5-docUpgrade krb5-apps-clientsUpgrade krb5-develUpgrade krb5Upgrade krb5-devel-32bitUpgrade krb5-plugin-preauth-pkinitUpgrade krb5-plugin-kdb-ldapUpgrade krb5-serverUpgrade krb5-x86Upgrade krb5-client | Dec 18, 2015 | Aug 14, 2014 |
| Ubuntu | — | Upgrade krb5-kdc-ldapUpgrade libkadm5clnt-mit8Upgrade krb5-kdcUpgrade libkadm5srv-mit9Upgrade libgssrpc4Upgrade libkadm5srv-mit7Upgrade libk5crypto3Upgrade libkdb5-7Upgrade libkadm5srv-mit8Upgrade libkadm5clnt-mit7Upgrade krb5-admin-serverUpgrade krb5-pkinitUpgrade libkadm5clnt-mit9Upgrade libkrb5support0Upgrade libkdb5-4Upgrade libgssapi-krb5-2Upgrade libkrb5-3Upgrade libkdb5-6Upgrade libkrad0Upgrade krb5-userUpgrade krb5-otp | Nov 8, 2024 | Aug 14, 2014 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub