NVD

Id
33052  
Name
CVE-2014-5353  
Description
The krb5_ldap_get_password_policy_from_dn function in plugins/kdb/ldap/libkdb_ldap/ldap_pwd_policy.c in MIT Kerberos 5 (aka krb5) before 1.13.1, when the KDC uses LDAP, allows remote authenticated users to cause a denial of service (daemon crash) via a successful LDAP query with no results, as demonstrated by using an incorrect object type for a password policy.  
Reject
 
CVSS Version
2  
CVSS Score
3.5  
Severity
Low  
CVSS Base Score
3.5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
6.8  
CVSS Vector
(AV:N/AC:M/Au:S/C:N/I:N/A:P)  
Pub Date
2017-01-19  
Published
2014-12-16  
Modified Date
2017-01-02  
Seq
2014-5353  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
173420 33052 CVE-2014-5353 http://advisories.mageia.org/MGASA-2014-0536.html  View
173421 33052 CVE-2014-5353 FEDORA-2015-5949  View
173422 33052 CVE-2014-5353 openSUSE-SU-2015:0542  View
173423 33052 CVE-2014-5353 RHSA-2015:0439  View
173424 33052 CVE-2014-5353 RHSA-2015:0794  View
173425 33052 CVE-2014-5353 MDVSA-2015:009  View
173426 33052 CVE-2014-5353 http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html  View
173427 33052 CVE-2014-5353 71679  View
173428 33052 CVE-2014-5353 1031376  View
173429 33052 CVE-2014-5353 USN-2498-1  View
173430 33052 CVE-2014-5353 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=773226  View
173431 33052 CVE-2014-5353 https://github.com/krb5/krb5/commit/d1f707024f1d0af6e54a18885322d70fa15ec4d3  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
18389 JVNDB-2014-007264 MIT Kerberos 5 の plugins/kdb/ldap/libkdb_ldap/ldap_pwd_policy.c におけるサービス運用妨害 (DoS) の脆弱性 MIT Kerberos 5 (別名 krb5) の plugins/kdb/ldap/libkdb_ldap/ldap_pwd_policy.c の krb5_ldap_get_password_policy_from_dn 関数には、KDC が LDAP を使用する際、サービス運用妨害 (デーモンクラッシュ) 状態にされる脆弱性が存在します。 CVE-2014-5353 72642 CVE-2014-5353 33052 3.5 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-007264.html 2014-12-05 2015-06-08 View