CVE-2016-3119

MediumCVSS 5.3/10Last modified Jun 17, 2026

Description

The process_db_args function in plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c in the LDAP KDB module in kadmind in MIT Kerberos 5 (aka krb5) through 1.13.4 and 1.14.x through 1.14.1 mishandles the DB argument, which allows remote authenticated users to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted request to modify a principal.

Metrics

CVSS 3.0 5.3/10CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://lists.opensuse.org/opensuse-updates/2016-04/msg00007.htmlThird Party Advisory
http://lists.opensuse.org/opensuse-updates/2016-04/msg00055.htmlThird Party Advisory
http://rhn.redhat.com/errata/RHSA-2016-2591.html
http://www.securityfocus.com/bid/85392Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1035399Third Party Advisory, VDB Entry
https://github.com/krb5/krb5/commit/08c642c09c38a9c6454ab43a9b53b2a89b9eef99Patch
https://lists.debian.org/debian-lts-announce/2018/01/msg00040.html
http://lists.opensuse.org/opensuse-updates/2016-04/msg00007.htmlThird Party Advisory
http://lists.opensuse.org/opensuse-updates/2016-04/msg00055.htmlThird Party Advisory
http://rhn.redhat.com/errata/RHSA-2016-2591.html
http://www.securityfocus.com/bid/85392Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1035399Third Party Advisory, VDB Entry
https://github.com/krb5/krb5/commit/08c642c09c38a9c6454ab43a9b53b2a89b9eef99Patch
https://lists.debian.org/debian-lts-announce/2018/01/msg00040.html

Timeline

Published: Mar 26, 2016
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2016

CVE-2016-31206.5The validate_as_request function in kdc_util.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.13.6 and 1.4.x bef CVE-2016-31245.3The sanitycheck module in SimpleSAMLphp before 1.14.1 allows remote attackers to learn the PHP version on the system via unspecified vectors CVE-2016-31257.5The mod_tls module in ProFTPD before 1.3.5b and 1.3.6 before 1.3.6rc2 does not properly handle the TLSDHParamFile directive, which might cau CVE-2016-31266.1Cross-site scripting (XSS) vulnerability in the Management Console in BlackBerry Enterprise Server (BES) 12 before 12.4.1 allows remote atta CVE-2016-31277.5An information disclosure vulnerability in the logging implementation of BlackBerry Good Control Server versions earlier than 2.3.53.62 allo CVE-2016-31288.2A spoofing vulnerability in the Core of BlackBerry Enterprise Server (BES) 12 through 12.5.2 allows remote attackers to enroll an illegitima CVE-2016-31296.6A remote shell execution vulnerability in the BlackBerry Good Enterprise Mobility Server (GEMS) implementation of the Apache Karaf command s CVE-2016-31308.1An information disclosure vulnerability in the Core and Management Console in BlackBerry Enterprise Server (BES) 12 through 12.5.2 allows re CVE-2016-31316.5Cloudera CDH before 5.6.1 allows authorization bypass via direct internal API calls.CVE-2016-31329.8Double free vulnerability in the SplDoublyLinkedList::offsetSet function in ext/spl/spl_dllist.c in PHP 7.x before 7.0.6 allows remote attac CVE-2016-31348.4The netfilter subsystem in the Linux kernel through 4.5.2 does not validate certain offset fields, which allows local users to gain privileg CVE-2016-31357.8Integer overflow in the xt_alloc_table_info function in net/netfilter/x_tables.c in the Linux kernel through 4.5.2 on 32-bit platforms allow