AVG-586

Package krb5
Status Fixed
Severity Medium
Type insufficient validation
Affected 1.16-1
Fixed 1.16.1-1
Current 1.16.1-1 [core]
Ticket None
Created Tue Jan 16 16:48:08 2018
Issue Severity Remote Type Description
CVE-2018-5730 Medium Yes Insufficient validation
A flaw was found in MIT krb5 1.6 or later, an authenticated kadmin user with permission to add principals to an LDAP Kerberos database can circumvent a DN...
CVE-2018-5729 Medium Yes Insufficient validation
A flaw was found in MIT krb5 1.6 or later, an authenticated kadmin user with permission to add principals to an LDAP Kerberos database can cause a null...
Date Advisory Package Description
05 Jun 2018 ASA-201806-3 krb5 insufficient validation
References
https://github.com/poojamnit/Kerberos-V5-1.16-Vulnerabilities/tree/master/Integer%20Overflow