REDHAT-BUG-1551082: Low severity MIT krb5 vulnerability

Published Mar 2, 2018

Updated

A flaw was found in MIT krb5 1.6 or later, an authenticated kadmin user with permission to add principals to an LDAP Kerberos database can circumvent a DN containership check by supplying both a "linkdn" and "containerdn" database argument, or by supplying a DN string which is a left extension of a container DN string but is not hierarchically within the container DN.

Reference: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=891869

Upstream patch: https://github.com/krb5/krb5/commit/e1caf6fb74981da62039846931ebdffed71309d1

Affected Software

1 affected component

MIT krb5>=1.6

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade MIT krb5 to a version that resolves this vulnerability.
Fixed in 1.6 or laterPatch e1caf6fb74981da62039846931ebdffed71309d1

Event History

Mar 2, 2018

Data Sourced

via Red Hat·05:14 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of REDHAT-BUG-1551082?

The severity of REDHAT-BUG-1551082 is critical due to the potential for unauthorized access and modification in an LDAP Kerberos database.

How do I fix REDHAT-BUG-1551082?

To fix REDHAT-BUG-1551082, upgrade to the latest version of MIT krb5 that addresses this vulnerability.

What versions of MIT krb5 are affected by REDHAT-BUG-1551082?

Versions of MIT krb5 starting from 1.6 and later are affected by REDHAT-BUG-1551082.

What type of attack does REDHAT-BUG-1551082 enable?

REDHAT-BUG-1551082 enables an authenticated kadmin user to potentially bypass important security checks when adding principals.

Are there any workarounds for REDHAT-BUG-1551082?

There are no official workarounds for REDHAT-BUG-1551082, and patching is the recommended approach.