CVE-2018-5730
MIT krb5 1.6 or later allows an authenticated kadmin with permission to add principals to an LDAP...
MIT krb5 1.6 or later allows an authenticated kadmin with permission to add principals to an LDAP Kerberos database to circumvent a DN containership check by supplying both a "linkdn" and "containerdn" database argument, or by supplying a DN string which is a left extension of a container DN string but is not hierarchically within the container DN.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- High
- User interaction
- None
What an attacker can affect
- Confidentiality
- Low
- Integrity
- Low
- Availability
- None
Exploit likelihood
What each source reports
NVD Score used
MIT krb5 1.6 or later allows an authenticated kadmin with permission to add principals to an LDAP Kerberos database to circumvent a DN containership check by supplying both a "linkdn" and "containerdn" database argument, or by supplying a DN string which is a left extension of a container DN string but is not hierarchically within the container DN.
- Record
CVE-2018-5730- CVSS 3.1
- 3.8 Low
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N - CVSS 2.0
- 5.5 Medium
AV:N/AC:L/Au:S/C:P/I:P/A:N - Weakness
- CWE-90
- Updated
- 2026-11-02
CVE List No score
MIT krb5 1.6 or later allows an authenticated kadmin with permission to add principals to an LDAP Kerberos database to circumvent a DN containership check by supplying both a "linkdn" and "containerdn" database argument, or by supplying a DN string which is a left extension of a container DN string but is not hierarchically within the container DN.
- Record
CVE-2018-5730- Updated
- 2026-11-02
EUVDEUVD-2018-17499 No score
MIT krb5 1.6 or later allows an authenticated kadmin with permission to add principals to an LDAP Kerberos database to circumvent a DN containership check by supplying both a "linkdn" and "containerdn" database argument, or by supplying a DN string which is a left extension of a container DN string but is not hierarchically within the container DN.
- Record
EUVD-2018-17499- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-cmm2-4q45-jpgh
MIT krb5 1.6 or later allows an authenticated kadmin with permission to add principals to an LDAP...
MIT krb5 1.6 or later allows an authenticated kadmin with permission to add principals to an LDAP Kerberos database to circumvent a DN containership check by supplying both a "linkdn" and "containerdn" database argument, or by supplying a DN string which is a left extension of a container DN string but is not hierarchically within the container DN.
- Record
GHSA-cmm2-4q45-jpgh- CVSS 3.1
- 3.8 Low
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N - Weakness
- CWE-90
- Updated
- 2026-11-02
OSVBELL-CVE-2018-5730
CVE-2018-5730 does not affect BellSoft software
- Record
BELL-CVE-2018-5730- CVSS 3.1
- 3.8 Low
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N - Updated
- 2026-11-02
OSV
MIT krb5 1.6 or later allows an authenticated kadmin with permission to add principals to an LDAP Kerberos database to circumvent a DN containership check by supplying both a "linkdn" and "containerdn" database argument, or by supplying a DN string which is a left extension of a container DN string but is not hierarchically within the container DN.
- Record
CVE-2018-5730- CVSS 3.1
- 3.8 Low
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N - Updated
- 2026-11-02
Show 8 moreShow less
OSVDEBIAN-CVE-2018-5730
MIT krb5 1.6 or later allows an authenticated kadmin with permission to add principals to an LDAP Kerberos database to circumvent a DN containership check by supplying both a "linkdn" and "containerdn" database argument, or by supplying a DN string which is a left extension of a container DN string but is not hierarchically within the container DN.
- Record
DEBIAN-CVE-2018-5730- CVSS 3.1
- 3.8 Low
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N - Updated
- 2026-11-02
OSVRHSA-2018:3071
Red Hat Security Advisory: krb5 security, bug fix, and enhancement update
- Record
RHSA-2018:3071- CVSS 3.0
- 4.7 Medium
CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L - Updated
- 2026-11-02
OSVUBUNTU-CVE-2018-5730
MIT krb5 1.6 or later allows an authenticated kadmin with permission to add principals to an LDAP Kerberos database to circumvent a DN containership check by supplying both a "linkdn" and "containerdn" database argument, or by supplying a DN string which is a left extension of a container DN string but is not hierarchically within the container DN.
- Record
UBUNTU-CVE-2018-5730- CVSS 3.1
- 3.8 Low
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N - CVSS 3.0
- 3.8 Low
CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N - Updated
- 2026-11-02
OSVMGASA-2018-0155 No score
Updated krb5 packages fix security vulnerabilities
Updated krb5 packages fix security vulnerabilities:
An issue was discovered in MIT Kerberos 5 (aka krb5) through 1.16. The pre-defined function "strlen" is getting a "NULL" string as a parameter value in plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c in the Key Distribution Center (KDC), which allows remote authenticated users to cause a denial of service (NULL pointer dereference) via a modified kadmin client (CVE-2018-5710, CVE-2018-5729, CVE-2018-5730).
- Record
MGASA-2018-0155- Updated
- 2026-11-02
OSVopenSUSE-SU-2019:0139-1 No score
Security update for krb5
This update for krb5 fixes the following issues:
Security issues fixed:
- CVE-2018-5729, CVE-2018-5730: Fixed multiple flaws in LDAP DN checking (bsc#1083926, bsc#1083927)
This update was imported from the SUSE:SLE-15:Update update project.
- Record
openSUSE-SU-2019:0139-1- Updated
- 2026-11-02
OSVSUSE-SU-2018:0846-1 No score
Security update for krb5
This update for krb5 provides the following fixes:
Security issues fixed:
- CVE-2018-5730: DN container check bypass by supplying special crafted data (bsc#1083927).
- CVE-2018-5729: Null pointer dereference in kadmind or DN container check bypass by supplying special crafted data (bsc#1083926).
Non-security issues fixed:
- Make it possible for legacy applications (e.g. SAP Netweaver) to remain compatible with newer Kerberos. System administrators who are experiencing this kind of compatibility issues may set the environment variable GSSAPI_ASSUME_MECH_MATCH to a non-empty value, and make sure the environment variable is visible and effective to the application startup script. (bsc#1057662)
- Fix a GSS failure in legacy applications by not indicating deprecated GSS mechanisms in gss_indicate_mech() list. (bsc#1081725)
- Record
SUSE-SU-2018:0846-1- Updated
- 2026-11-02
OSVSUSE-SU-2018:0859-1 No score
Security update for krb5
This update for krb5 fixes several issues.
This security issue was fixed:
- CVE-2017-11462: Prevent automatic security context deletion to prevent double-free (bsc#1056995).
- CVE-2018-5729: Null pointer dereference in kadmind or DN container check bypass by supplying special crafted data (bsc#1083926).
- CVE-2018-5730: DN container check bypass by supplying special crafted data (bsc#1083927).
This non-security issue was fixed:
- Avoid indefinite polling in KDC communication. (bsc#970696)
- Record
SUSE-SU-2018:0859-1- Updated
- 2026-11-02
OSVSUSE-SU-2019:0175-1 No score
Security update for krb5
This update for krb5 fixes the following issues:
Security issues fixed:
- CVE-2018-5729, CVE-2018-5730: Fixed multiple flaws in LDAP DN checking (bsc#1083926, bsc#1083927)
- Record
SUSE-SU-2019:0175-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
krb5Debian:12 |
before 1.16.1-1 | 1.16.1-1 |
krb5Debian:13 |
before 1.16.1-1 | 1.16.1-1 |
krb5Debian:14 |
before 1.16.1-1 | 1.16.1-1 |
krb5Debian:8 From an advisory covering 4 CVEs |
before 1.12.1+dfsg-19+deb8u5, plus listed versions 1.12.1+dfsg-191.12.1+dfsg-19+deb8u11.12.1+dfsg-19+deb8u21.12.1+dfsg-19+deb8u4 |
1.12.1+dfsg-19+deb8u5 |
krb5Debian:9 From an advisory covering 5 CVEs |
before 1.15-1+deb9u3, plus listed versions 1.15-11.15-1+deb9u11.15-1+deb9u2 |
1.15-1+deb9u3 |
krb5Mageia:6 From an advisory covering 3 CVEs |
before 1.15.1-2.3.mga6 | 1.15.1-2.3.mga6 |
krb5Red Hat:enterprise_linux:7::client From an advisory covering 2 CVEs |
before 0:1.15.1-34.el7 | 0:1.15.1-34.el7 |
krb5-debuginfoRed Hat:enterprise_linux:7::client From an advisory covering 2 CVEs |
before 0:1.15.1-34.el7 | 0:1.15.1-34.el7 |
krb5-libsRed Hat:enterprise_linux:7::client From an advisory covering 2 CVEs |
before 0:1.15.1-34.el7 | 0:1.15.1-34.el7 |
krb5-pkinitRed Hat:enterprise_linux:7::client From an advisory covering 2 CVEs |
before 0:1.15.1-34.el7 | 0:1.15.1-34.el7 |
Show 51 moreShow less
| Package | Affected | Fixed |
|---|---|---|
krb5-workstationRed Hat:enterprise_linux:7::client From an advisory covering 2 CVEs |
before 0:1.15.1-34.el7 | 0:1.15.1-34.el7 |
libkadm5Red Hat:enterprise_linux:7::client From an advisory covering 2 CVEs |
before 0:1.15.1-34.el7 | 0:1.15.1-34.el7 |
krb5-develRed Hat:enterprise_linux:7::client From an advisory covering 2 CVEs |
before 0:1.15.1-34.el7 | 0:1.15.1-34.el7 |
krb5-serverRed Hat:enterprise_linux:7::client From an advisory covering 2 CVEs |
before 0:1.15.1-34.el7 | 0:1.15.1-34.el7 |
krb5-server-ldapRed Hat:enterprise_linux:7::client From an advisory covering 2 CVEs |
before 0:1.15.1-34.el7 | 0:1.15.1-34.el7 |
krb5Red Hat:enterprise_linux:7::computenode From an advisory covering 2 CVEs |
before 0:1.15.1-34.el7 | 0:1.15.1-34.el7 |
krb5-debuginfoRed Hat:enterprise_linux:7::computenode From an advisory covering 2 CVEs |
before 0:1.15.1-34.el7 | 0:1.15.1-34.el7 |
krb5-libsRed Hat:enterprise_linux:7::computenode From an advisory covering 2 CVEs |
before 0:1.15.1-34.el7 | 0:1.15.1-34.el7 |
krb5-pkinitRed Hat:enterprise_linux:7::computenode From an advisory covering 2 CVEs |
before 0:1.15.1-34.el7 | 0:1.15.1-34.el7 |
krb5-workstationRed Hat:enterprise_linux:7::computenode From an advisory covering 2 CVEs |
before 0:1.15.1-34.el7 | 0:1.15.1-34.el7 |
libkadm5Red Hat:enterprise_linux:7::computenode From an advisory covering 2 CVEs |
before 0:1.15.1-34.el7 | 0:1.15.1-34.el7 |
krb5-develRed Hat:enterprise_linux:7::computenode From an advisory covering 2 CVEs |
before 0:1.15.1-34.el7 | 0:1.15.1-34.el7 |
krb5-serverRed Hat:enterprise_linux:7::computenode From an advisory covering 2 CVEs |
before 0:1.15.1-34.el7 | 0:1.15.1-34.el7 |
krb5-server-ldapRed Hat:enterprise_linux:7::computenode From an advisory covering 2 CVEs |
before 0:1.15.1-34.el7 | 0:1.15.1-34.el7 |
krb5Red Hat:enterprise_linux:7::server From an advisory covering 2 CVEs |
before 0:1.15.1-34.el7 | 0:1.15.1-34.el7 |
krb5-debuginfoRed Hat:enterprise_linux:7::server From an advisory covering 2 CVEs |
before 0:1.15.1-34.el7 | 0:1.15.1-34.el7 |
krb5-develRed Hat:enterprise_linux:7::server From an advisory covering 2 CVEs |
before 0:1.15.1-34.el7 | 0:1.15.1-34.el7 |
krb5-libsRed Hat:enterprise_linux:7::server From an advisory covering 2 CVEs |
before 0:1.15.1-34.el7 | 0:1.15.1-34.el7 |
krb5-pkinitRed Hat:enterprise_linux:7::server From an advisory covering 2 CVEs |
before 0:1.15.1-34.el7 | 0:1.15.1-34.el7 |
krb5-serverRed Hat:enterprise_linux:7::server From an advisory covering 2 CVEs |
before 0:1.15.1-34.el7 | 0:1.15.1-34.el7 |
krb5-server-ldapRed Hat:enterprise_linux:7::server From an advisory covering 2 CVEs |
before 0:1.15.1-34.el7 | 0:1.15.1-34.el7 |
krb5-workstationRed Hat:enterprise_linux:7::server From an advisory covering 2 CVEs |
before 0:1.15.1-34.el7 | 0:1.15.1-34.el7 |
libkadm5Red Hat:enterprise_linux:7::server From an advisory covering 2 CVEs |
before 0:1.15.1-34.el7 | 0:1.15.1-34.el7 |
krb5Red Hat:enterprise_linux:7::workstation From an advisory covering 2 CVEs |
before 0:1.15.1-34.el7 | 0:1.15.1-34.el7 |
krb5-debuginfoRed Hat:enterprise_linux:7::workstation From an advisory covering 2 CVEs |
before 0:1.15.1-34.el7 | 0:1.15.1-34.el7 |
krb5-develRed Hat:enterprise_linux:7::workstation From an advisory covering 2 CVEs |
before 0:1.15.1-34.el7 | 0:1.15.1-34.el7 |
krb5-libsRed Hat:enterprise_linux:7::workstation From an advisory covering 2 CVEs |
before 0:1.15.1-34.el7 | 0:1.15.1-34.el7 |
krb5-pkinitRed Hat:enterprise_linux:7::workstation From an advisory covering 2 CVEs |
before 0:1.15.1-34.el7 | 0:1.15.1-34.el7 |
krb5-serverRed Hat:enterprise_linux:7::workstation From an advisory covering 2 CVEs |
before 0:1.15.1-34.el7 | 0:1.15.1-34.el7 |
krb5-server-ldapRed Hat:enterprise_linux:7::workstation From an advisory covering 2 CVEs |
before 0:1.15.1-34.el7 | 0:1.15.1-34.el7 |
krb5-workstationRed Hat:enterprise_linux:7::workstation From an advisory covering 2 CVEs |
before 0:1.15.1-34.el7 | 0:1.15.1-34.el7 |
libkadm5Red Hat:enterprise_linux:7::workstation From an advisory covering 2 CVEs |
before 0:1.15.1-34.el7 | 0:1.15.1-34.el7 |
krb5SUSE:Linux Enterprise Desktop 12 SP2 From an advisory covering 2 CVEs |
before 1.12.5-40.23.2 | 1.12.5-40.23.2 |
krb5SUSE:Linux Enterprise Desktop 12 SP3 From an advisory covering 2 CVEs |
before 1.12.5-40.23.2 | 1.12.5-40.23.2 |
krb5SUSE:Linux Enterprise Server for Raspberry Pi 12 SP2 From an advisory covering 2 CVEs |
before 1.12.5-40.23.2 | 1.12.5-40.23.2 |
krb5SUSE:Linux Enterprise Software Development Kit 12 SP2 From an advisory covering 2 CVEs |
before 1.12.5-40.23.2 | 1.12.5-40.23.2 |
krb5SUSE:Linux Enterprise Software Development Kit 12 SP3 From an advisory covering 2 CVEs |
before 1.12.5-40.23.2 | 1.12.5-40.23.2 |
krb5SUSE:Linux Enterprise Server 12 SP2 From an advisory covering 2 CVEs |
before 1.12.5-40.23.2 | 1.12.5-40.23.2 |
krb5SUSE:Linux Enterprise Server for SAP Applications 12 SP2 From an advisory covering 2 CVEs |
before 1.12.5-40.23.2 | 1.12.5-40.23.2 |
krb5SUSE:Linux Enterprise Server 12 SP3 From an advisory covering 2 CVEs |
before 1.12.5-40.23.2 | 1.12.5-40.23.2 |
krb5SUSE:Linux Enterprise Server for SAP Applications 12 SP3 From an advisory covering 2 CVEs |
before 1.12.5-40.23.2 | 1.12.5-40.23.2 |
krb5SUSE:Linux Enterprise Software Development Kit 11 SP4 From an advisory covering 3 CVEs |
before 1.6.3-133.49.113.7.1 | 1.6.3-133.49.113.7.1 |
krb5SUSE:Linux Enterprise Server 11 SP4 From an advisory covering 3 CVEs |
before 1.6.3-133.49.113.7.1 | 1.6.3-133.49.113.7.1 |
krb5SUSE:Linux Enterprise Server for SAP Applications 11 SP4 From an advisory covering 3 CVEs |
before 1.6.3-133.49.113.7.1 | 1.6.3-133.49.113.7.1 |
krb5SUSE:Linux Enterprise Module for Basesystem 15 From an advisory covering 2 CVEs |
before 1.15.2-6.6.2 | 1.15.2-6.6.2 |
krb5SUSE:Linux Enterprise Module for Server Applications 15 From an advisory covering 2 CVEs |
before 1.15.2-6.6.2 | 1.15.2-6.6.2 |
krb5Ubuntu:14.04:LTS |
before 1.12+dfsg-2ubuntu5.4, plus listed versions 1.10.1+dfsg-6.1ubuntu11.11.3+dfsg-3ubuntu21.12+dfsg-2ubuntu11.12+dfsg-2ubuntu21.12+dfsg-2ubuntu3 Show 6 moreShow less1.12+dfsg-2ubuntu41.12+dfsg-2ubuntu4.21.12+dfsg-2ubuntu51.12+dfsg-2ubuntu5.11.12+dfsg-2ubuntu5.21.12+dfsg-2ubuntu5.3 |
1.12+dfsg-2ubuntu5.4 |
krb5Ubuntu:16.04:LTS |
before 1.13.2+dfsg-5ubuntu2.1, plus listed versions 1.13.2+dfsg-21.13.2+dfsg-31.13.2+dfsg-41.13.2+dfsg-51.13.2+dfsg-5ubuntu11.13.2+dfsg-5ubuntu2 |
1.13.2+dfsg-5ubuntu2.1 |
krb5Ubuntu:18.04:LTS |
before 1.16-2ubuntu0.1, plus listed versions 1.15.1-21.16-21.16-2build1 |
1.16-2ubuntu0.1 |
krb5openSUSE:Leap 15.0 From an advisory covering 2 CVEs |
before 1.15.2-lp150.5.6.1 | 1.15.2-lp150.5.6.1 |
krb5-miniopenSUSE:Leap 15.0 From an advisory covering 2 CVEs |
before 1.15.2-lp150.5.6.1 | 1.15.2-lp150.5.6.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2018-5730 is a low vulnerability (CVSS 3.8) in Debian Linux, published March 1, 2018. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.24%, the 82nd percentile. Fixed in krb5 1.16.1-1.
References
securitytracker.com/id/1042071
github.com/krb5/krb5/commit/e1caf6fb74981da62039846931ebdffed71309d1
access.redhat.com/errata/RHSA-2018:3071
bugzilla.redhat.com/show_bug.cgi?id=1551082
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OIFUL3CPM4S5TOXTTOCQ3CUZN6XCXUTR
bugs.debian.org/cgi-bin/bugreport.cgi?bug=891869
Show 45 moreShow less
lists.debian.org/debian-lts-announce/2019/01/msg00020.html
nvd.nist.gov/vuln/detail/CVE-2018-5730
docs.bell-sw.com/security/cves/CVE-2018-5730
security-tracker.debian.org/tracker/CVE-2018-5730
advisories.mageia.org/MGASA-2018-0155.html
bugs.mageia.org/show_bug.cgi?id=22647
security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_3071.json
cve.org/CVERecord?id=CVE-2018-5729
suse.com/support/update/announcement/2018/suse-su-20180846-1
bugzilla.suse.com/1057662
ubuntu.com/security/CVE-2018-5730
lists.opensuse.org/archives/list/[email protected]/thread/SMD7M4ZIYICJIBXAT2O34XUCDIU6HRBV