CVEvulnerability

CVE-2016-3120

6.5 MEDIUM Published 2016-08-01 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2016-08-01
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
6.5 MEDIUM — CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS 2.0 ([email protected])
4.0 MEDIUM — AV:N/AC:L/Au:S/C:N/I:N/A:P
Weaknesses
CWE-476

Description

The validate_as_request function in kdc_util.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.13.6 and 1.4.x before 1.14.3, when restrict_anonymous_to_tgt is enabled, uses an incorrect client data structure, which allows remote authenticated users to cause a denial of service (NULL pointer dereference and daemon crash) via an S4U2Self request.

Affected configurations

• mit kerberos 5 1.13 • mit kerberos 5 1.13.1 • mit kerberos 5 1.13.2 • mit kerberos 5 1.13.3 • mit kerberos 5 1.13.4 • mit kerberos 5 1.13.5 • mit kerberos 5 1.13.6 • mit kerberos 5 1.14 • mit kerberos 5 1.14.1 • mit kerberos 5 1.14.2

Related

Weakness · CWE (1)

  • CWE-476 NULL Pointer Dereference weakness

References