CVE-2016-3119 Null dereference in n/a

What is CVE-2016-3119?

CVE-2016-3119 is a medium-severity vulnerability in Mit Kerberos 5, published on 26 Mar 2016. Any signed-in user can exploit it over the network, with no action from the victim.

Official description

The process_db_args function in plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c in the LDAP KDB module in kadmind in MIT Kerberos 5 (aka krb5) through 1.13.4 and 1.14.x through 1.14.1 mishandles the DB argument, which allows remote authenticated users to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted request to modify a principal.

Which versions are affected by CVE-2016-3119?

It affects 3 products.

Products include Mit Kerberos 5, Opensuse Leap, Opensuse Opensuse.

How do I fix CVE-2016-3119?

Apply the vendor's patch.

Is CVE-2016-3119 being exploited?

There is no known exploitation of CVE-2016-3119 in the wild and no public exploit code.

Other vulnerabilities in Mit Kerberos 5

• CVE-2011-0285 Use after free in n/a Critical 10.0
• CVE-2008-0947 Memory corruption in n/a Critical 10.0
• CVE-2007-5902 Integer overflow in n/a Critical 10.0
• CVE-2007-4743 Memory corruption in n/a Critical 10.0
• CVE-2007-3999 Memory corruption in n/a Critical 10.0

All Mit Kerberos 5 vulnerabilities

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as ALPINE-CVE-2016-3119, DEBIAN-CVE-2016-3119, GHSA-qq9x-4x4m-294x, MGASA-2016-0123, SUSE-SU-2016:0994-1, SUSE-SU-2016:1088-1 and 1 more.