The process_db_args function in plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c in the LDAP KDB module in kadmind in MIT Kerberos 5 (aka krb5) through 1.13.4 and 1.14.x through 1.14.1 mishandles the DB argument, which allows remote authenticated users to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted request to modify a principal.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2016-03-26T01:00:00

Updated: 2024-08-05T23:47:57.271Z

Reserved: 2016-03-11T00:00:00

Link: CVE-2016-3119

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2016-03-26T01:59:05.997

Modified: 2024-11-21T02:49:25.123

Link: CVE-2016-3119

cve-icon Redhat

Severity : Low

Publid Date: 2016-03-14T00:00:00Z

Links: CVE-2016-3119 - Bugzilla