Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:6388
HistoryMay 25, 2018 - 8:44 a.m.

Denial Of Service (DoS)

2018-05-2508:44:54
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5

0.002 Low

EPSS

Percentile

52.3%

libkrb5.so is vulnerable to denial of service (DoS). A “NULL” string can be passed to the strlen function of plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c, allowing a remote authenticated user acting as a compromised kadmin client to crash the application.