CVE-2016-3119
Medium · 5.3CVSS
5.3
EPSS
39.8%
Published
Mar 26, 2016
CISA due date
—
The record
The process_db_args function in plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c in the LDAP KDB module in kadmind in MIT Kerberos 5 (aka krb5) through 1.13.4 and 1.14.x through 1.14.1 mishandles the DB argument, which allows remote authenticated users to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted request to modify a principal.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Alpine:v3.4 | krb5 | 0 | 1.14-r2 |
| Debian:11 | krb5 | 0 | 1.14.2+dfsg-1 |
| Debian:12 | krb5 | 0 | 1.14.2+dfsg-1 |
| Debian:13 | krb5 | 0 | 1.14.2+dfsg-1 |
| Debian:7 | krb5 | 0 | 1.10.1+dfsg-5+deb7u9 |
| Mageia:5 | krb5 | 0 | 1.12.5-1.mga5 |
| Red Hat:enterprise_linux:7::client | krb5 | 0 | 0:1.14.1-26.el7 |
| Red Hat:enterprise_linux:7::client | krb5-debuginfo | 0 | 0:1.14.1-26.el7 |
| Red Hat:enterprise_linux:7::client | krb5-devel | 0 | 0:1.14.1-26.el7 |
| Red Hat:enterprise_linux:7::client | krb5-libs | 0 | 0:1.14.1-26.el7 |
| Red Hat:enterprise_linux:7::client | krb5-pkinit | 0 | 0:1.14.1-26.el7 |
| Red Hat:enterprise_linux:7::client | krb5-server | 0 | 0:1.14.1-26.el7 |
| Red Hat:enterprise_linux:7::client | krb5-server-ldap | 0 | 0:1.14.1-26.el7 |
| Red Hat:enterprise_linux:7::client | krb5-workstation | 0 | 0:1.14.1-26.el7 |
| Red Hat:enterprise_linux:7::client | libkadm5 | 0 | 0:1.14.1-26.el7 |
| Red Hat:enterprise_linux:7::computenode | krb5 | 0 | 0:1.14.1-26.el7 |
| Red Hat:enterprise_linux:7::computenode | krb5-debuginfo | 0 | 0:1.14.1-26.el7 |
| Red Hat:enterprise_linux:7::computenode | krb5-devel | 0 | 0:1.14.1-26.el7 |
| Red Hat:enterprise_linux:7::computenode | krb5-libs | 0 | 0:1.14.1-26.el7 |
| Red Hat:enterprise_linux:7::computenode | krb5-pkinit | 0 | 0:1.14.1-26.el7 |
| Red Hat:enterprise_linux:7::computenode | krb5-server | 0 | 0:1.14.1-26.el7 |
| Red Hat:enterprise_linux:7::computenode | krb5-server-ldap | 0 | 0:1.14.1-26.el7 |
| Red Hat:enterprise_linux:7::computenode | krb5-workstation | 0 | 0:1.14.1-26.el7 |
| Red Hat:enterprise_linux:7::computenode | libkadm5 | 0 | 0:1.14.1-26.el7 |
| Red Hat:enterprise_linux:7::server | krb5 | 0 | 0:1.14.1-26.el7 |
| Red Hat:enterprise_linux:7::server | krb5-debuginfo | 0 | 0:1.14.1-26.el7 |
| Red Hat:enterprise_linux:7::server | krb5-devel | 0 | 0:1.14.1-26.el7 |
| Red Hat:enterprise_linux:7::server | krb5-libs | 0 | 0:1.14.1-26.el7 |
| Red Hat:enterprise_linux:7::server | krb5-pkinit | 0 | 0:1.14.1-26.el7 |
| Red Hat:enterprise_linux:7::server | krb5-server | 0 | 0:1.14.1-26.el7 |
| Red Hat:enterprise_linux:7::server | krb5-server-ldap | 0 | 0:1.14.1-26.el7 |
| Red Hat:enterprise_linux:7::server | krb5-workstation | 0 | 0:1.14.1-26.el7 |
| Red Hat:enterprise_linux:7::server | libkadm5 | 0 | 0:1.14.1-26.el7 |
| Red Hat:enterprise_linux:7::workstation | krb5 | 0 | 0:1.14.1-26.el7 |
| Red Hat:enterprise_linux:7::workstation | krb5-debuginfo | 0 | 0:1.14.1-26.el7 |
| Red Hat:enterprise_linux:7::workstation | krb5-devel | 0 | 0:1.14.1-26.el7 |
| Red Hat:enterprise_linux:7::workstation | krb5-libs | 0 | 0:1.14.1-26.el7 |
| Red Hat:enterprise_linux:7::workstation | krb5-pkinit | 0 | 0:1.14.1-26.el7 |
| Red Hat:enterprise_linux:7::workstation | krb5-server | 0 | 0:1.14.1-26.el7 |
| Red Hat:enterprise_linux:7::workstation | krb5-server-ldap | 0 | 0:1.14.1-26.el7 |
| Red Hat:enterprise_linux:7::workstation | krb5-workstation | 0 | 0:1.14.1-26.el7 |
| Red Hat:enterprise_linux:7::workstation | libkadm5 | 0 | 0:1.14.1-26.el7 |
| SUSE:Linux Enterprise Desktop 12 | krb5 | 0 | 1.12.1-28.1 |
| SUSE:Linux Enterprise Desktop 12 SP1 | krb5 | 0 | 1.12.1-28.1 |
| SUSE:Linux Enterprise Server 11 SP4 | krb5 | 0 | 1.6.3-133.49.109.1 |
| SUSE:Linux Enterprise Server 12 | krb5 | 0 | 1.12.1-28.1 |
| SUSE:Linux Enterprise Server 12 SP1 | krb5 | 0 | 1.12.1-28.1 |
| SUSE:Linux Enterprise Server for SAP Applications 11 SP4 | krb5 | 0 | 1.6.3-133.49.109.1 |
| SUSE:Linux Enterprise Server for SAP Applications 12 | krb5 | 0 | 1.12.1-28.1 |
| SUSE:Linux Enterprise Server for SAP Applications 12 SP1 | krb5 | 0 | 1.12.1-28.1 |
| SUSE:Linux Enterprise Software Development Kit 11 SP4 | krb5 | 0 | 1.6.3-133.49.109.1 |
| SUSE:Linux Enterprise Software Development Kit 12 | krb5 | 0 | 1.12.1-28.1 |
| SUSE:Linux Enterprise Software Development Kit 12 SP1 | krb5 | 0 | 1.12.1-28.1 |
| Ubuntu:14.04:LTS | krb5 | 0 | 1.12+dfsg-2ubuntu5.4 |
| Ubuntu:16.04:LTS | krb5 | 0 | 1.13.2+dfsg-5ubuntu2.1 |
| openSUSE:Tumbleweed | krb5 | 0 | 1.15-1.1 |
Related vulnerabilities
- CVE-2024-37371 In MIT Kerberos 5 (aka krb5) before 1.21.3, an attacker can cause invalid memory reads… Also affects krb5
- CVE-2024-37370 In MIT Kerberos 5 (aka krb5) before 1.21.3, an attacker can modify the plaintext Extra… Also affects krb5
- CVE-2024-26461 Kerberos 5 (aka krb5) 1.21.2 contains a memory leak vulnerability in… Also affects krb5
- CVE-2024-26458 Kerberos 5 (aka krb5) 1.21.2 contains a memory leak in /krb5/src/lib/rpc/pmap_rmt.c. Also affects krb5
- CVE-2020-28196 MIT Kerberos 5 (aka krb5) before 1.17.2 and 1.18.x before 1.18.3 allows unbounded… Also affects krb5
- CVE-2014-5351 The kadm5_randkey_principal_3 function in lib/kadm5/srv/svr_principal.c in kadmind in MIT… Also affects krb5
- CVE-2002-2443 schpw.c in the kpasswd service in kadmind in MIT Kerberos 5 (aka krb5) before 1.11.3 does… Also affects krb5
- CVE-2012-1016 The pkinit_server_return_padata function in plugins/preauth/pkinit/pkinit_srv.c in the… Also affects krb5