CVE-2014-5353 — NULL Pointer Dereference in Kerberos 5

CWE-476 — NULL Pointer Dereference10 documents8 sources
Severity
3.5LOWNVD
EPSS
0.7%
top 29.08%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
13
MIT Krb5MIT Kerberos 5Canonical Ubuntu Linux+10 more
Timeline
PublishedDec 16
Latest updateMay 13

Description

The krb5_ldap_get_password_policy_from_dn function in plugins/kdb/ldap/libkdb_ldap/ldap_pwd_policy.c in MIT Kerberos 5 (aka krb5) before 1.13.1, when the KDC uses LDAP, allows remote authenticated users to cause a denial of service (daemon crash) via a successful LDAP query with no results, as demonstrated by using an incorrect object type for a password policy.

CVSS vector

AV:N/AC:M/C:N/I:N/A:PExploitability: 6.8 | Impact: 2.9

Affected Packages7 packages

▶NVDmit/kerberos_5< 1.13.1
▶Debianmit/krb5< 1.12.1+dfsg-16+3
▶NVDoracle/solaris10, 11.2+1
▶NVDopensuse/opensuse13.1, 13.2+1

Also affects: Debian Linux 7.0, Fedora 22, Ubuntu Linux 10.04, 12.04, 14.04, 14.10, Enterprise Linux 6.6, 7.3, 7.4, 7.5, 7.6, 7.7

Patches

Patch: github.com ↗Patch: github.com ↗

🔴Vulnerability Details

4
GHSA
GHSA-x6p8-9r6f-f728: The krb5_ldap_get_password_policy_from_dn function in plugins/kdb/ldap/libkdb_ldap/ldap_pwd_policy↗2022-05-13
▶
OSV
krb5 vulnerabilities↗2015-02-10
▶
OSV
CVE-2014-5353: The krb5_ldap_get_password_policy_from_dn function in plugins/kdb/ldap/libkdb_ldap/ldap_pwd_policy↗2014-12-16
▶
CVEList
CVE-2014-5353: The krb5_ldap_get_password_policy_from_dn function in plugins/kdb/ldap/libkdb_ldap/ldap_pwd_policy↗2014-12-16
▶

📋Vendor Advisories

3
Ubuntu
Kerberos vulnerabilities↗2015-02-10
▶
Red Hat
krb5: NULL pointer dereference when using a ticket policy name as a password policy name↗2014-12-06
▶
Debian
CVE-2014-5353: krb5 - The krb5_ldap_get_password_policy_from_dn function in plugins/kdb/ldap/libkdb_ld...↗2014
▶

💬Community

2
Bugzilla
CVE-2014-5353 krb5: NULL pointer dereference when using a ticket policy name as a password policy name↗2014-12-16
▶
Bugzilla
CVE-2014-5353 krb5: NULL pointer dereference when using a ticket policy name as a password policy name [fedora-all]↗2014-12-16
▶
CVE-2014-5353 — NULL Pointer Dereference in Kerberos 5 | cvebase