Total vulnerabilities in the database
MIT krb5 1.6 or later allows an authenticated kadmin with permission to add principals to an LDAP Kerberos database to cause a denial of service (NULL pointer dereference) or bypass a DN container check by supplying tagged data that is internal to the database module.
| Software | From | Fixed in |
|---|---|---|
| fedoraproject / fedora | 26 | 26.x |
| fedoraproject / fedora | 27 | 27.x |
| debian / debian_linux | 8.0 | 8.0.x |
| debian / debian_linux | 9.0 | 9.0.x |
| redhat / enterprise_linux_desktop | 7.0 | 7.0.x |
| redhat / enterprise_linux_workstation | 7.0 | 7.0.x |
| redhat / enterprise_linux_server | 7.0 | 7.0.x |
| mit / kerberos_5 | 5-1.6 | 5-1.21.2 |