The (1) kadm5_create_principal_3 and (2) kadm5_modify_principal functions in lib/kadm5/srv/svr_principal.c in kadmind in MIT Kerberos 5 (aka krb5) 1.12.x and 1.13.x before 1.13.4 and 1.14.x before 1.14.1 allow remote authenticated users to cause a denial of service (NULL pointer dereference and daemon crash) by specifying KADM5_POLICY with a NULL policy name.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2016-02-13T02:00:00

Updated: 2024-08-06T08:20:43.695Z

Reserved: 2015-12-23T00:00:00

Link: CVE-2015-8630

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2016-02-13T02:59:01.087

Modified: 2024-11-21T02:38:51.380

Link: CVE-2015-8630

cve-icon Redhat

Severity : Low

Publid Date: 2016-01-08T00:00:00Z

Links: CVE-2015-8630 - Bugzilla