CVE-2014-5353

The krb5_ldap_get_password_policy_from_dn function in plugins/kdb/ldap/libkdb_ldap/ldap_pwd_policy.c in MIT Kerberos 5 (aka krb5) before 1.13.1, when the KDC…

published December 16, 2014

CVSS
—
EPSS
5%
Percentile
92.2
In the wild
Unconfirmed
What it is

The krb5_ldap_get_password_policy_from_dn function in plugins/kdb/ldap/libkdb_ldap/ldap_pwd_policy.c in MIT Kerberos 5 (aka krb5) before 1.13.1, when the KDC uses LDAP, allows remote authenticated users to cause a denial of service (daemon crash) via a successful LDAP query with no results, as demonstrated by using an incorrect object type for a password policy.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04968 · 92.2th percentile
Published
2014-12-16T23:00Z
EPSS history
Timeline
  • 16 DEC 23:00Z
    The krb5_ldap_get_password_policy_from_dn function in plugins/kdb/ldap/libkdb_ldap/ldap_pwd_policy.c in MIT Kerberos 5 (aka krb5) before 1.13.1, when the KDC…
    cvelistv5