Skip to content
OpenAdvisories
High · 7.5 CVE-2019-14844 EUVD-2019-5968GHSA-5445-rx9p-gmmp

A flaw was found in, Fedora versions of krb5 from 1.16.1 to, including 1.17.x, in the way a Kerberos client could crash the KDC by sending …

Published Sep 26, 2019 · Updated Aug 5, 2024 · Assigned by redhat

Description

A flaw was found in, Fedora versions of krb5 from 1.16.1 to, including 1.17.x, in the way a Kerberos client could crash the KDC by sending one of the RFC 4556 "enctypes". A remote unauthenticated user could use this flaw to crash the KDC.

Affected products

VendorProductAffectedFixed
MIT krb5 Fedora versions of krb5 from 1.16.1 to, including 1.17.x —

References