CVE-2014-5354

plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c in MIT Kerberos 5 (aka krb5) 1.12.x and 1.13.x before 1.13.1, when the KDC uses LDAP, allows remote…

published December 16, 2014

CVSS
—
EPSS
2%
Percentile
77.5
In the wild
Unconfirmed
What it is

plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c in MIT Kerberos 5 (aka krb5) 1.12.x and 1.13.x before 1.13.1, when the KDC uses LDAP, allows remote authenticated users to cause a denial of service (NULL pointer dereference and daemon crash) by creating a database entry for a keyless principal, as demonstrated by a kadmin "add_principal -nokey" or "purgekeys -all" command.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01740 · 77.5th percentile
Published
2014-12-16T23:00Z
EPSS history
Timeline
  • 16 DEC 23:00Z
    plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c in MIT Kerberos 5 (aka krb5) 1.12.x and 1.13.x before 1.13.1, when the KDC uses LDAP, allows remote…
    cvelistv5