This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page. View CVE-2018-5729 →

DEBIAN-CVE-2018-5729

MIT krb5 1.6 or later allows an authenticated kadmin with permission to add principals to an LDAP Kerberos database to cause a denial of service (NULL...

Original description

The description as published by the source.

MIT krb5 1.6 or later allows an authenticated kadmin with permission to add principals to an LDAP Kerberos database to cause a denial of service (NULL pointer dereference) or bypass a DN container check by supplying tagged data that is internal to the database module.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Affected packages

Debian:12 krb5

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.1-1"}]}]

Debian:13 krb5

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.1-1"}]}]

Debian:14 krb5

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.1-1"}]}]

References

advisory security-tracker.debian.org