NULL pointer dereference in Kerberos 5 - CVE-2018-5729

Vulnerability identifier: #VU11080

CSH Severity: Low

CVSS v4: 4.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]

CVE-ID: CVE-2018-5729

CWE-ID: CWE-476

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local attacker to cause DoS condition on the target system.

The weakness exists due to NULL pointer dereference. A local attacker can add crafted principals to the Lightweight Directory Access Protocol (LDAP) database and cause the service to crash.

Kerberos 5
Arch Linux
Amazon Linux AMI
Red Hat Enterprise Linux Server
Red Hat Enterprise Linux Workstation
Red Hat Enterprise Linux Desktop
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for Scientific Computing
Red Hat Enterprise Linux for Power
Opensuse
Fedora
krb5

Install update from vendor's website.

krb5 - addressed in versions 1.15.2-7.fc26, 1.15.2-7.fc27

• https://github.com/krb5/krb5/commit/e1caf6fb74981da62039846931ebdffed71309d1

• Multiple vulnerabilities in MIT Kerberos 5
• Arch Linux update for krb5
• Amazon Linux AMI update for krb5
• OpenSUSE Linux update for krb5
• Red Hat update for krb5
• Fedora 27 update for krb5
• Fedora 26 update for krb5