QwikSec

Security Database

CVE

CWE

Training

CVE-2016-3120

Published: Aug 1, 2016

Modified: Aug 5, 2024

PUBLISHED

Description

The validate_as_request function in kdc_util.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.13.6 and 1.4.x before 1.14.3, when restrict_anonymous_to_tgt is enabled, uses an incorrect client data structure, which allows remote authenticated users to cause a denial of service (NULL pointer dereference and daemon crash) via an S4U2Self request.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

https://github.com/krb5/krb5/commit/93b4a6306a0026cf1cc31ac4bd8a49ba5d034ba7

x_refsource_CONFIRM

vdb-entry

x_refsource_BID

[debian-lts-announce] 20180131 [SECURITY] [DLA 1265-1] krb5 security update

mailing-list

x_refsource_MLIST

openSUSE-SU-2016:2268

vendor-advisory

x_refsource_SUSE

http://krbdev.mit.edu/rt/Ticket/Display.html?id=8458

x_refsource_CONFIRM

vdb-entry

x_refsource_SECTRACK

http://web.mit.edu/kerberos/krb5-1.13/

x_refsource_CONFIRM

vendor-advisory

x_refsource_REDHAT

http://web.mit.edu/kerberos/krb5-1.14/

x_refsource_CONFIRM

FEDORA-2016-0674a3c372

vendor-advisory

x_refsource_FEDORA

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.