{ "schema_version": "1.4.0", "id": "GHSA-c28w-559x-wr7v", "modified": "2024-05-23T18:30:52Z", "published": "2022-05-13T01:05:38Z", "aliases": [ "CVE-2018-5729" ], "details": "MIT krb5 1.6 or later allows an authenticated kadmin with permission to add principals to an LDAP Kerberos database to cause a denial of service (NULL pointer dereference) or bypass a DN container check by supplying tagged data that is internal to the database module.", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L" } ], "affected": [], "references": [ { "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-5729" }, { "type": "WEB", "url": "https://github.com/krb5/krb5/commit/e1caf6fb74981da62039846931ebdffed71309d1" }, { "type": "WEB", "url": "https://access.redhat.com/errata/RHBA-2019:0327" }, { "type": "WEB", "url": "https://access.redhat.com/errata/RHSA-2018:3071" }, { "type": "WEB", "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=891869" }, { "type": "WEB", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1551083" }, { "type": "WEB", "url": "https://lists.debian.org/debian-lts-announce/2019/01/msg00020.html" }, { "type": "WEB", "url": "https://lists.debian.org/debian-lts-announce/2021/09/msg00019.html" }, { "type": "WEB", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GK5T6JPMBHBPKS7HNGHYUUF4KKRMNSNU" }, { "type": "WEB", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OIFUL3CPM4S5TOXTTOCQ3CUZN6XCXUTR" }, { "type": "WEB", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GK5T6JPMBHBPKS7HNGHYUUF4KKRMNSNU" }, { "type": "WEB", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OIFUL3CPM4S5TOXTTOCQ3CUZN6XCXUTR" }, { "type": "WEB", "url": "http://www.securitytracker.com/id/1042071" } ], "database_specific": { "cwe_ids": [ "CWE-476" ], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2018-03-06T20:29:00Z" } }