Alpaquita LinuxStreamSecurity Advisory
Search Cve

CVE-2018-5729

Published: March 6, 2018Last modified: November 9, 2023

Description

MIT krb5 1.6 or later allows an authenticated kadmin with permission to add principals to an LDAP Kerberos database to cause a denial of service (NULL pointer dereference) or bypass a DN container check by supplying tagged data that is internal to the database module.

Severity score breakdown

ParameterValue
Base score4.7
Attack VectorNETWORK
Attack complexityLOW
Privileges requiredHIGH
User interactionNONE
ScopeUNCHANGED
ConfidentialityLOW
Integrity impactLOW
Availability impactLOW
VectorCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L

Status

ProductReleasePackageStatus
Alpaquita Linux23 LTSkrb5Not affected (1.20.1-r0)
Streamkrb5Not affected (1.21.2-r0)

References

ON THIS PAGE