CVE-2014-5354
Fixed in a distro release EPSS 2%
plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c in MIT Kerberos 5 (aka krb5) 1.12.x and 1.13.x before 1.13.1, when the KDC uses LDAP, allows remote authenticated users to cause a denial of service (NULL pointer dereference and daemon crash) by creating a database entry for a keyless principal, as demonstrated by a kadmin "add_principal -nokey" or "purgekeys -all" command.
Products: mit kerberos, mit kerberos_5
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | krb5 | 1.12.1+dfsg-16 |
| Debian 13 | krb5 | 1.12.1+dfsg-16 |
| Debian 14 | krb5 | 1.12.1+dfsg-16 |
| SUSE Linux Enterprise Desktop 11 SP3 | krb5 | 1.6.3-133.49.68.1 |
| SUSE Linux Enterprise Desktop 11 SP4 | krb5 | 1.6.3-133.49.68.1 |
| SUSE Linux Enterprise Server 11 SP3 | krb5 | 1.6.3-133.49.68.1 |
| SUSE Linux Enterprise Server 11 SP3 | krb5-doc | 1.6.3-133.49.68.2 |
| SUSE Linux Enterprise Server 11 SP3 | krb5-plugins | 1.6.3-133.49.68.1 |
| SUSE Linux Enterprise Server 11 SP3-TERADATA | krb5 | 1.6.3-133.49.68.1 |
| SUSE Linux Enterprise Server 11 SP3-TERADATA | krb5-doc | 1.6.3-133.49.68.2 |
| SUSE Linux Enterprise Server 11 SP3-TERADATA | krb5-plugins | 1.6.3-133.49.68.1 |
| SUSE Linux Enterprise Server 11 SP4 | krb5 | 1.6.3-133.49.68.1 |
| SUSE Linux Enterprise Server 11 SP4 | krb5-doc | 1.6.3-133.49.68.2 |
| SUSE Linux Enterprise Server 11 SP4 | krb5-plugins | 1.6.3-133.49.68.1 |
| SUSE Linux Enterprise Server 12 | krb5 | 1.12.1-16.1 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP3 | krb5 | 1.6.3-133.49.68.1 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP3 | krb5-doc | 1.6.3-133.49.68.2 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP3 | krb5-plugins | 1.6.3-133.49.68.1 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP4 | krb5 | 1.6.3-133.49.68.1 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP4 | krb5-doc | 1.6.3-133.49.68.2 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP4 | krb5-plugins | 1.6.3-133.49.68.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 | krb5 | 1.12.1-16.1 |
| SUSE Linux Enterprise Software Development Kit 11 SP3 | krb5 | 1.6.3-133.49.68.1 |
| SUSE Linux Enterprise Software Development Kit 11 SP4 | krb5 | 1.6.3-133.49.68.1 |
| SUSE Linux Enterprise Software Development Kit 12 | krb5 | 1.12.1-16.1 |
| Ubuntu 14.04 LTS | krb5 | 1.12+dfsg-2ubuntu5.1 |
| openSUSE Tumbleweed | krb5 | 1.15-1.1 |