The validate_as_request function in kdc_util.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.13.6 and 1.4.x before 1.14.3, when restrict_anonymous_to_tgt is enabled, uses an incorrect client data structure, which allows remote authenticated users to cause a denial of service (NULL pointer dereference and daemon crash) via an S4U2Self request.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade krb5 | Aug 30, 2017 | Aug 1, 2016 |
| Amazon_linux | — | Upgrade krb5 | Feb 7, 2017 | Jul 31, 2016 |
| Debian | — | Upgrade krb5 | Feb 20, 2019 | Jul 31, 2016 |
| Freebsd | — | Upgrade krb5-114Upgrade krb5-113 | Dec 10, 2025 | Jul 21, 2016 |
| Huawei Euleros 2_0_sp1 | — | Upgrade krb5-serverUpgrade krb5-workstationUpgrade krb5-develUpgrade krb5-pkinitUpgrade krb5-server-ldapUpgrade krb5-libs | Nov 30, 2017 | Jul 31, 2016 |
| Oracle Solaris | — | Upgrade security/kerberos-5 to version 1.14.4.0-0.175.3.21.0.2.0 on Solaris 11.3Upgrade security/kerberos-5/kdc to version 1.14.4.0-0.175.3.21.0.2.0 on Solaris 11.3 | Jun 20, 2017 | Jul 31, 2016 |
| Oracle_linux | — | Upgrade krb5-serverUpgrade libkadm5Upgrade krb5-libsUpgrade krb5-server-ldapUpgrade krb5-develUpgrade krb5-workstationUpgrade krb5-pkinit | Nov 9, 2016 | Jul 19, 2016 |
| Redhat_linux | — | Upgrade krb5-server-ldapUpgrade krb5-debuginfoUpgrade krb5-libsUpgrade krb5-serverUpgrade krb5-workstationUpgrade libkadm5Upgrade krb5-develNo solution existsUpgrade krb5-pkinit | Nov 4, 2016 | Jul 31, 2016 |
| Suse | — | Upgrade krb5-clientUpgrade krb5-plugin-preauth-otpUpgrade krb5-develUpgrade krb5-32bitUpgrade krb5-serverUpgrade krb5-docUpgrade krb5-plugin-preauth-pkinitUpgrade krb5-plugin-kdb-ldapUpgrade krb5 | Aug 26, 2016 | Jul 31, 2016 |
| Ubuntu | — | Upgrade krb5 | Nov 19, 2024 | Aug 1, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub