MIT krb5 1.6 or later allows an authenticated kadmin with permission to add principals to an LDAP Kerberos database to cause a denial of service (NULL pointer dereference) or bypass a DN container check by supplying tagged data that is internal to the database module.
A NULL pointer dereference occurs when the application dereferences a pointer that it expects to be valid, but is NULL, typically causing a crash or exit.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Kerberos_5 | Mit | 5-1.6 (including) | 5-1.21.2 (excluding) |
| Red Hat Enterprise Linux 7 | RedHat | krb5-0:1.15.1-34.el7 | * |
| Krb5 | Ubuntu | artful | * |
| Krb5 | Ubuntu | bionic | * |
| Krb5 | Ubuntu | cosmic | * |
| Krb5 | Ubuntu | precise/esm | * |
| Krb5 | Ubuntu | trusty | * |
| Krb5 | Ubuntu | xenial | * |