CVE-2016-3120
Published Aug 1, 2016
Last updated a year ago
Overview
- Description
- The validate_as_request function in kdc_util.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.13.6 and 1.4.x before 1.14.3, when restrict_anonymous_to_tgt is enabled, uses an incorrect client data structure, which allows remote authenticated users to cause a denial of service (NULL pointer dereference and daemon crash) via an S4U2Self request.
- Source
- cve@mitre.org
- NVD status
- Modified
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 3.0
- Type
- Primary
- Base score
- 6.5
- Impact score
- 3.6
- Exploitability score
- 2.8
- Vector string
- CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- Severity
- MEDIUM
CVSS 2.0
- Type
- Primary
- Base score
- 4
- Impact score
- 2.9
- Exploitability score
- 8
- Vector string
- AV:N/AC:L/Au:S/C:N/I:N/A:P
Weaknesses
- nvd@nist.gov
- CWE-476
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:mit:kerberos_5:1.13:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "169D00BD-344F-453C-BE7C-9DF0740080BB"
},
{
"criteria": "cpe:2.3:a:mit:kerberos_5:1.13.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "765B3248-A524-4A79-858C-E787C1C1599E"
},
{
"criteria": "cpe:2.3:a:mit:kerberos_5:1.13.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BF1BB0AB-2C22-49F9-9D2A-074D2F711BA8"
},
{
"criteria": "cpe:2.3:a:mit:kerberos_5:1.13.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C8EC001E-9507-410D-836F-93002789D574"
},
{
"criteria": "cpe:2.3:a:mit:kerberos_5:1.13.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CC0939BF-9ACB-41A7-9B48-0FBF1176C8CB"
},
{
"criteria": "cpe:2.3:a:mit:kerberos_5:1.13.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0037EF80-A599-4938-889F-9276E339A8E0"
},
{
"criteria": "cpe:2.3:a:mit:kerberos_5:1.13.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1CABFE58-4811-49EC-8565-35EB7D5F6F4C"
},
{
"criteria": "cpe:2.3:a:mit:kerberos_5:1.14:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6E30B176-1FE5-4C53-8B79-2E6D87DF05B3"
},
{
"criteria": "cpe:2.3:a:mit:kerberos_5:1.14.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E650B5A3-99CA-491B-A1FB-259EF548D92E"
},
{
"criteria": "cpe:2.3:a:mit:kerberos_5:1.14.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "091F3C51-980E-482F-9882-0A555A8F74BC"
}
],
"operator": "OR"
}
]
}
]