CVE-2023-36054
MediumCVSS 6.5Exploitation Probability (EPSS)
High risk79th percentile - higher than 79% of all known CVEs
Summary
In the kadm_rpc_xdr.c library in MIT Kerberos 5 before 1.20.2 and 1.21.x before 1.21.1, there is a bug related to freeing an uninitialized pointer. A remote authenticated user can trigger a kadmind crash.
Risk Assessment
This vulnerability may lead to a kadmind service crash, potentially affecting the availability of the Kerberos system within the organization.
Recommendation
It is recommended to upgrade to version 1.20.2 or 1.21.1 or later to mitigate this vulnerability.
Original NVD description (English source)
lib/kadm5/kadm_rpc_xdr.c in MIT Kerberos 5 (aka krb5) before 1.20.2 and 1.21.x before 1.21.1 frees an uninitialized pointer. A remote authenticated user can trigger a kadmind crash. This occurs because _xdr_kadm5_principal_ent_rec does not validate the relationship between n_key_data and the key_data array count.