MIT krb5 1.6 or later allows an authenticated kadmin with permission to add principals to an LDAP Kerberos database to circumvent a DN containership check by supplying both a "linkdn" and "containerdn" database argument, or by supplying a DN string which is a left extension of a container DN string but is not hierarchically within the container DN.
CVSS Details
- CVSS 3.1 Base Score: 3.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade krb5-server-ldapUpgrade krb5-develUpgrade libkadm5Upgrade krb5-serverUpgrade krb5-libsUpgrade krb5-workstationUpgrade krb5-pkinitUpgrade krb5-debuginfo | Apr 27, 2020 | Mar 6, 2018 |
| Amazon_linux | — | Upgrade krb5 | Jan 25, 2019 | Mar 6, 2018 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Mar 6, 2018 |
| Centos_linux | — | Upgrade libkadm5Upgrade krb5-workstationUpgrade krb5-debuginfoUpgrade krb5-serverUpgrade krb5-server-ldapUpgrade krb5-libsUpgrade krb5-pkinitUpgrade krb5-devel | Aug 28, 2019 | Mar 6, 2018 |
| Debian | — | Upgrade krb5 | Feb 20, 2019 | Mar 6, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade krb5-pkinitUpgrade krb5-develUpgrade krb5-workstationUpgrade krb5-serverUpgrade libkadm5Upgrade krb5-libsUpgrade krb5-server-ldap | Dec 31, 2018 | Mar 6, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade krb5-libsUpgrade krb5-pkinitUpgrade krb5-develUpgrade krb5-serverUpgrade krb5-server-ldapUpgrade libkadm5Upgrade krb5-workstation | Dec 11, 2018 | Mar 6, 2018 |
| Oracle Solaris | — | Upgrade security/kerberos-5 to version 1.16.1.0-0.175.3.35.0.4.0 on Solaris 11.3Upgrade security/kerberos-5/kdc to version 1.16.1.0-0.175.3.35.0.4.0 on Solaris 11.3 | Aug 24, 2018 | Mar 6, 2018 |
| Oracle_linux | — | Upgrade krb5-server-ldapUpgrade krb5-libsUpgrade libkadm5Upgrade krb5-develUpgrade krb5-serverUpgrade krb5-pkinitUpgrade krb5-workstation | Nov 6, 2018 | Mar 1, 2018 |
| Red Hat Jboss Eap | — | — | Sep 19, 2024 | Mar 1, 2018 |
| Redhat_linux | — | Upgrade krb5-server-ldapUpgrade libkadm5Upgrade krb5-develUpgrade krb5-workstationUpgrade krb5-serverUpgrade krb5-libsNo solution existsUpgrade krb5-pkinitUpgrade krb5-debuginfo | Oct 31, 2018 | Mar 6, 2018 |
| Suse | — | Upgrade krb5-32bitUpgrade krb5-docUpgrade krb5Upgrade krb5-devel-32bitUpgrade krb5-apps-serversUpgrade krb5-plugin-preauth-otpUpgrade krb5-plugin-kdb-ldapUpgrade krb5-develUpgrade krb5-apps-clientsUpgrade krb5-serverUpgrade krb5-plugin-preauth-pkinitUpgrade krb5-x86Upgrade krb5-clientUpgrade krb5-miniUpgrade krb5-mini-devel | Mar 30, 2018 | Mar 6, 2018 |
| Ubuntu | — | Upgrade krb5 | Nov 19, 2024 | Mar 6, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 6, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub