CVE-2016-3119

Name of the Vulnerable Software and Affected Versions MIT Kerberos 5 (krb5) versions 1.13.4 and earlier MIT Kerberos 5 (krb5) versions 1.14.x through 1.14.1

Description The issue is related to the process db args function in the LDAP KDB module, which does not handle the DB argument properly. This allows remote authenticated users to cause a denial of service by sending a crafted request to modify a principal, resulting in a NULL pointer dereference and daemon crash.

Recommendations For MIT Kerberos 5 (krb5) versions 1.13.4 and earlier, update to a version later than 1.13.4. For MIT Kerberos 5 (krb5) versions 1.14.x through 1.14.1, update to a version later than 1.14.1. As a temporary workaround, consider restricting access to the process db args function in the LDAP KDB module until a patch is available.