AVG-586

Package krb5
Status Vulnerable
Severity Low
Type information disclosure
Affected 1.16-1
Fixed Unknown
Current 1.16-1 [core]
Ticket Create
Created Tue Jan 16 16:48:08 2018
Issue Severity Remote Type Description
CVE-2018-5709 Low Yes Information disclosure
An issue was discovered in MIT Kerberos 5 (aka krb5) through 1.16. There is a variable "dbentry->n_key_data" in kadmin/dbutil/dump.c that can store 16-bit...
References
https://github.com/poojamnit/Kerberos-V5-1.16-Vulnerabilities/tree/master/Integer%20Overflow