Logo
vulnerabilityCVE-2018-5710
Name
CVE-2018-5710
Source
NVD ( link)Debian ( link)
Description
An issue was discovered in MIT Kerberos 5 (aka krb5) through 1.16. The pre-defined function "strlen" is getting a "NULL" string as a parameter value in plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c in the Key Distribution Center (KDC), which allows remote authenticated users to cause a denial of service (NULL pointer dereference) via a modified kadmin client.
Published Date
Updated Date
Workaround
-
Advisories

Analysis#


Affected Component
Analysis
libkrb5
Exploitable

Vulnerability Ratings#


6.5
other
4
CVSSv2

Others affected components#


Name
Project
Project Version
Version
Status
buildroot
master
1.22.2
Exploitable
openwrt
master
1.22.2-r1
Exploitable
openwrt
openwrt-25.12
1.22.1-r1
Exploitable
yocto
kirkstone
1.17.2
Exploitable
yocto
master
1.22.2
Exploitable
yocto
scarthgap
1.21.3
Exploitable