CVE-2018-5710
Summary
| CVE | CVE-2018-5710 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2018-01-16 09:29:00 UTC |
| Updated | 2023-11-07 02:58:00 UTC |
| Description | An issue was discovered in MIT Kerberos 5 (aka krb5) through 1.16. The pre-defined function "strlen" is getting a "NULL" string as a parameter value in plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c in the Key Distribution Center (KDC), which allows remote authenticated users to cause a denial of service (NULL pointer dereference) via a modified kadmin client. |
Risk And Classification
Problem Types: CWE-476
NVD Known Affected Configurations (CPE 2.3)
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Kerberos-V5-1.16-Vulnerabilities/Denial Of Service(DoS) at master · poojamnit/Kerberos-V5-1.16-Vulnerabilities · GitHub | github.com | ||
| Kerberos-V5-1.16-Vulnerabilities/Denial Of Service(DoS) at master · poojamnit/Kerberos-V5-1.16-Vulnerabilities · GitHub | MISC | github.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.