PT-2016-5374 · Mit+4 · Mit Kerberos 5+4

Greghudson · Published 2016-08-01 · Updated 2024-06-15 · CVE-2016-3120

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions MIT Kerberos 5 versions prior to 1.13.6 MIT Kerberos 5 versions 1.4.x prior to 1.14.3

Description The issue is related to the validate as request function in kdc util.c within the Key Distribution Center (KDC) of MIT Kerberos 5. When restrict anonymous to tgt is enabled, it incorrectly uses a client data structure. This allows remote authenticated users to cause a denial of service, resulting in a NULL pointer dereference and daemon crash, via an S4U2Self request.

Recommendations For versions prior to 1.13.6, update to version 1.13.6 or later. For versions 1.4.x prior to 1.14.3, update to version 1.14.3 or later.

Fix

DoS

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

ALT-PU-2017-1166

CESA-2016_2591

CVE-2016-3120

DLA-1265-1

MGASA-2016-0306

OPENSUSE-SU-2024:10004-1

RHSA-2016:2591

RHSA-2016_2591

SUSE-SU-2016:2136-1

SUSE-SU-2016_2136-1

Affected Products

Alt Linux

Centos

Mit Kerberos 5

Red Hat

Suse

References · 82

• https://nvd.nist.gov/vuln/detail/CVE-2016-3120 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2016-3120 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2016-0306 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:10004-1 · Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2016-2591.html · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/[e-mail]/thread/AWL3KYFRJIX37EAM4DKCQQIQP2WBKL35 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2016-3120 · Security Note
• https://ubuntu.com/security/CVE-2016-3120 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2016-3120 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2016:2136-1 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2016-0306.html · Security Note
• https://osv.dev/vulnerability/CVE-2016-3120 · Vendor Advisory
• https://osv.dev/vulnerability/ALPINE-CVE-2016-3120 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AWL3KYFRJIX37EAM4DKCQQIQP2WBKL35 · Vendor Advisory
• http://lists.opensuse.org/opensuse-updates/2016-09/msg00035.html · Vendor Advisory