NetSight
IP …
medium4.7

CVE-2018-5729

MIT krb5 1.6 or later allows an authenticated kadmin with permission to add principals to an LDAP Kerberos database to cause a denial of service (NULL pointer …

Impact

MIT krb5 1.6 or later allows an authenticated kadmin with permission to add principals to an LDAP Kerberos database to cause a denial of service (NULL pointer dereference) or bypass a DN container check by supplying tagged data that is internal to the database module.

Affected products

VendorProductAffected versions
MitKerberos 5
from 5-1.6 before 5-1.21.2
FedoraprojectFedora
Versions 26, 27
DebianDebian Linux
Versions 8.0, 9.0
RedhatEnterprise Linux Desktop
Version 7.0
RedhatEnterprise Linux Server
Version 7.0
RedhatEnterprise Linux Workstation
Version 7.0

Weakness classification

CWE-476

References