MIT krb5 1.6 or later allows an authenticated kadmin with permission to add principals to an LDAP Kerberos database to cause a denial of service (NULL pointer dereference) or bypass a DN container check by supplying tagged data that is internal to the database module.
CVSS Details
- CVSS 3.1 Base Score: 4.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-krb5-debuginfoamazon-linux-ami-2-upgrade-krb5-develamazon-linux-ami-2-upgrade-krb5-libsamazon-linux-ami-2-upgrade-krb5-pkinitamazon-linux-ami-2-upgrade-krb5-serveramazon-linux-ami-2-upgrade-krb5-server-ldapamazon-linux-ami-2-upgrade-krb5-workstationamazon-linux-ami-2-upgrade-libkadm5 | Apr 27, 2020 | Mar 6, 2018 | |
| Amazon_linux | — | amazon-linux-upgrade-krb5 | Jan 25, 2019 | Mar 6, 2018 |
| Arch Linux | arch-linux-upgrade-latest | Jul 11, 2025 | Mar 6, 2018 | |
| Centos_linux | — | centos-upgrade-krb5-debuginfocentos-upgrade-krb5-develcentos-upgrade-krb5-libscentos-upgrade-krb5-pkinitcentos-upgrade-krb5-servercentos-upgrade-krb5-server-ldapcentos-upgrade-krb5-workstationcentos-upgrade-libkadm5 | Aug 28, 2019 | Mar 6, 2018 |
| Debian | debian-upgrade-krb5 | Feb 20, 2019 | Mar 6, 2018 | |
| Huawei Euleros 2_0_sp2 | huawei-euleros-2_0_sp2-upgrade-krb5-develhuawei-euleros-2_0_sp2-upgrade-krb5-libshuawei-euleros-2_0_sp2-upgrade-krb5-pkinithuawei-euleros-2_0_sp2-upgrade-krb5-serverhuawei-euleros-2_0_sp2-upgrade-krb5-server-ldaphuawei-euleros-2_0_sp2-upgrade-krb5-workstationhuawei-euleros-2_0_sp2-upgrade-libkadm5 | Dec 31, 2018 | Mar 6, 2018 | |
| Huawei Euleros 2_0_sp3 | huawei-euleros-2_0_sp3-upgrade-krb5-develhuawei-euleros-2_0_sp3-upgrade-krb5-libshuawei-euleros-2_0_sp3-upgrade-krb5-pkinithuawei-euleros-2_0_sp3-upgrade-krb5-serverhuawei-euleros-2_0_sp3-upgrade-krb5-server-ldaphuawei-euleros-2_0_sp3-upgrade-krb5-workstationhuawei-euleros-2_0_sp3-upgrade-libkadm5 | Dec 11, 2018 | Mar 6, 2018 | |
| Oracle Solaris | oracle-solaris-11-3-upgrade-security-kerberos-5-1-16-1-0-0-175-3-35-0-4-0oracle-solaris-11-3-upgrade-security-kerberos-5-kdc-1-16-1-0-0-175-3-35-0-4-0 | Aug 24, 2018 | Mar 6, 2018 | |
| Oracle_linux | — | oracle-linux-upgrade-krb5-develoracle-linux-upgrade-krb5-libsoracle-linux-upgrade-krb5-pkinitoracle-linux-upgrade-krb5-serveroracle-linux-upgrade-krb5-server-ldaporacle-linux-upgrade-krb5-workstationoracle-linux-upgrade-libkadm5 | Nov 6, 2018 | Mar 1, 2018 |
| Redhat_linux | no-fix-redhat-rpm-packageredhat-upgrade-krb5-debuginforedhat-upgrade-krb5-develredhat-upgrade-krb5-libsredhat-upgrade-krb5-pkinitredhat-upgrade-krb5-serverredhat-upgrade-krb5-server-ldapredhat-upgrade-krb5-workstationredhat-upgrade-libkadm5 | Oct 31, 2018 | Mar 6, 2018 | |
| Suse | — | suse-upgrade-krb5suse-upgrade-krb5-32bitsuse-upgrade-krb5-apps-clientssuse-upgrade-krb5-apps-serverssuse-upgrade-krb5-clientsuse-upgrade-krb5-develsuse-upgrade-krb5-devel-32bitsuse-upgrade-krb5-docsuse-upgrade-krb5-minisuse-upgrade-krb5-mini-develsuse-upgrade-krb5-plugin-kdb-ldapsuse-upgrade-krb5-plugin-preauth-otpsuse-upgrade-krb5-plugin-preauth-pkinitsuse-upgrade-krb5-serversuse-upgrade-krb5-x86 | Mar 30, 2018 | Mar 6, 2018 |
| Ubuntu | ubuntu-upgrade-krb5 | Nov 19, 2024 | Mar 6, 2018 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | Mar 6, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub