APP: MIT Kerberos 5 kadmind Null Pointer Dereference
This signature detects attempts to cause a denial-of-service (DoS) on MIT Kerberos 5 kadmind service. Successful exploitation will cause the kadmin service to terminate.
Extended Description
The process_db_args function in plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c in the LDAP KDB module in kadmind in MIT Kerberos 5 (aka krb5) through 1.13.4 and 1.14.x through 1.14.1 mishandles the DB argument, which allows remote authenticated users to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted request to modify a principal.
Affected Products
Mit kerberos_5
References
CVE: CVE-2016-3119
Short Name
APP:MIT-KERBEROS-5-POLICY-DOS
Severity
Major
Recommended
True
Recommended Action
Drop
Category
APP
Keywords
5 CVE-2016-3119 Dereference Kerberos MIT Null Pointer kadmind
Release Date
04/19/2016
Supported Platforms
srx-branch-12.3
srx-19.3
srx-branch-19.3
vsrx3bsd-19.2
srx-branch-19.4
vsrx-19.4
mx-12.3
mx-19.4
vmx-19.4
mx-19.3
vsrx3bsd-19.4
srx-19.4
vsrx-12.3
vmx-19.3
vsrx-19.2
srx-12.3
Sigpack Version
3590
Port
TCP/749
False Positive
Unknown
Vendors
Opensuse
Mit
CVSS Score
3.5