Every CVE Search/ Get API key

CVE-2015-8630

The (1) kadm5_create_principal_3 and (2) kadm5_modify_principal functions in lib/kadm5/srv...

7.5 HighFix available

CVE-2015-8630 is a high vulnerability (CVSS 7.5) in Mit Kerberos 5, published February 5, 2016. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.29%, the 91st percentile. Fixed in krb5 1.14-r1.

The (1) kadm5_create_principal_3 and (2) kadm5_modify_principal functions in lib/kadm5/srv/svr_principal.c in kadmind in MIT Kerberos 5 (aka krb5) 1.12.x and 1.13.x before 1.13.4 and 1.14.x before 1.14.1 allow remote authenticated users to cause a denial of service (NULL pointer dereference and daemon crash) by specifying KADM5_POLICY with a NULL policy name.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

Exploit likelihood

4.29%Up 2.9 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 7.5

The (1) kadm5_create_principal_3 and (2) kadm5_modify_principal functions in lib/kadm5/srv/svr_principal.c in kadmind in MIT Kerberos 5 (aka krb5) 1.12.x and 1.13.x before 1.13.4 and 1.14.x before 1.14.1 allow remote authenticated users to cause a denial of service (NULL pointer dereference and daemon crash) by specifying KADM5_POLICY with a NULL policy name.

Record
CVE-2015-8630
CVSS 3.0
7.5 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 2.0
5.0 MediumAV:N/AC:L/Au:N/C:N/I:N/A:P
Updated
2026-11-02
CVE List No score

The (1) kadm5_create_principal_3 and (2) kadm5_modify_principal functions in lib/kadm5/srv/svr_principal.c in kadmind in MIT Kerberos 5 (aka krb5) 1.12.x and 1.13.x before 1.13.4 and 1.14.x before 1.14.1 allow remote authenticated users to cause a denial of service (NULL pointer dereference and daemon crash) by specifying KADM5_POLICY with a NULL policy name.

Record
CVE-2015-8630
Updated
2026-11-02
EUVDEUVD-2015-8507 No score

The (1) kadm5_create_principal_3 and (2) kadm5_modify_principal functions in lib/kadm5/srv/svr_principal.c in kadmind in MIT Kerberos 5 (aka krb5) 1.12.x and 1.13.x before 1.13.4 and 1.14.x before 1.14.1 allow remote authenticated users to cause a denial of service (NULL pointer dereference and daemon crash) by specifying KADM5_POLICY with a NULL policy name.

Record
EUVD-2015-8507
Updated
2026-11-03
GitHub AdvisoriesGHSA-ccgj-jmwf-5p3g 7.5

The (1) kadm5_create_principal_3 and (2) kadm5_modify_principal functions in lib/kadm5/srv...

The (1) kadm5_create_principal_3 and (2) kadm5_modify_principal functions in lib/kadm5/srv/svr_principal.c in kadmind in MIT Kerberos 5 (aka krb5) 1.12.x and 1.13.x before 1.13.4 and 1.14.x before 1.14.1 allow remote authenticated users to cause a denial of service (NULL pointer dereference and daemon crash) by specifying KADM5_POLICY with a NULL policy name.

Record
GHSA-ccgj-jmwf-5p3g
CVSS 3.0
7.5 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVALPINE-CVE-2015-8630 7.5

The (1) kadm5_create_principal_3 and (2) kadm5_modify_principal functions in lib/kadm5/srv/svr_principal.c in kadmind in MIT Kerberos 5 (aka krb5) 1.12.x and 1.13.x before 1.13.4 and 1.14.x before 1.14.1 allow remote authenticated users to cause a denial of service (NULL pointer dereference and daemon crash) by specifying KADM5_POLICY with a NULL policy name.

Record
ALPINE-CVE-2015-8630
CVSS 3.0
7.5 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSV 7.5

The (1) kadm5_create_principal_3 and (2) kadm5_modify_principal functions in lib/kadm5/srv/svr_principal.c in kadmind in MIT Kerberos 5 (aka krb5) 1.12.x and 1.13.x before 1.13.4 and 1.14.x before 1.14.1 allow remote authenticated users to cause a denial of service (NULL pointer dereference and daemon crash) by specifying KADM5_POLICY with a NULL policy name.

Record
CVE-2015-8630
CVSS 3.0
7.5 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
Show 5 moreShow less
OSVDEBIAN-CVE-2015-8630 7.5

The (1) kadm5_create_principal_3 and (2) kadm5_modify_principal functions in lib/kadm5/srv/svr_principal.c in kadmind in MIT Kerberos 5 (aka krb5) 1.12.x and 1.13.x before 1.13.4 and 1.14.x before 1.14.1 allow remote authenticated users to cause a denial of service (NULL pointer dereference and daemon crash) by specifying KADM5_POLICY with a NULL policy name.

Record
DEBIAN-CVE-2015-8630
CVSS 3.0
7.5 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2015-8630 7.5

The (1) kadm5_create_principal_3 and (2) kadm5_modify_principal functions in lib/kadm5/srv/svr_principal.c in kadmind in MIT Kerberos 5 (aka krb5) 1.12.x and 1.13.x before 1.13.4 and 1.14.x before 1.14.1 allow remote authenticated users to cause a denial of service (NULL pointer dereference and daemon crash) by specifying KADM5_POLICY with a NULL policy name.

Record
UBUNTU-CVE-2015-8630
CVSS 3.0
7.5 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVMGASA-2016-0052 No score

Updated krb5 packages fix security vulnerability

In all versions of MIT krb5, an authenticated attacker can cause kadmind to read beyond the end of allocated memory by sending a string without a terminating zero byte. Information leakage may be possible for an attacker with permission to modify the database (CVE-2015-8629).

In MIT krb5 1.12 and later, an authenticated attacker with permission to modify a principal entry can cause kadmind to dereference a null pointer by supplying a null policy value but including KADM5_POLICY in the mask (CVE-2015-8630).

In all versions of MIT krb5, an authenticated attacker can cause kadmind to leak memory by supplying a null principal name in a request which uses one. Repeating these requests will eventually cause kadmind to exhaust all available memory (CVE-2015-8631).

Record
MGASA-2016-0052
Updated
2026-11-02
OSVopenSUSE-SU-2024:10004-1 No score

krb5-1.15-1.1 on GA media

These are all security issues fixed in the krb5-1.15-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10004-1
Updated
2026-11-02
OSVSUSE-SU-2016:0429-1 No score

Security update for krb5

This update for krb5 fixes the following issues:

  • CVE-2015-8629: Information leak authenticated attackers with permissions to modify the database (bsc#963968)
  • CVE-2015-8630: An authenticated attacker with permission to modify a principal entry may have caused kadmind to crash (bsc#963964)
  • CVE-2015-8631: An authenticated attacker could have caused a memory leak in auditd by supplying a null principal name in request (bsc#963975)
Record
SUSE-SU-2016:0429-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
krb5
Alpine:v3.4
 before 1.14-r1
1.14-r1
krb5
Debian:12
 before 1.13.2+dfsg-5
1.13.2+dfsg-5
krb5
Debian:13
 before 1.13.2+dfsg-5
1.13.2+dfsg-5
krb5
Debian:14
 before 1.13.2+dfsg-5
1.13.2+dfsg-5
krb5
Mageia:5
 before 1.12.2-8.3.mga5
1.12.2-8.3.mga5
krb5
Red Hat:enterprise_linux:7::client
 before 0:1.13.2-12.el7_2
0:1.13.2-12.el7_2
krb5-debuginfo
Red Hat:enterprise_linux:7::client
 before 0:1.13.2-12.el7_2
0:1.13.2-12.el7_2
krb5-libs
Red Hat:enterprise_linux:7::client
 before 0:1.13.2-12.el7_2
0:1.13.2-12.el7_2
krb5-pkinit
Red Hat:enterprise_linux:7::client
 before 0:1.13.2-12.el7_2
0:1.13.2-12.el7_2
krb5-workstation
Red Hat:enterprise_linux:7::client
 before 0:1.13.2-12.el7_2
0:1.13.2-12.el7_2
Show 37 moreShow less
Affected packages
PackageAffectedFixed
krb5-devel
Red Hat:enterprise_linux:7::client
 before 0:1.13.2-12.el7_2
0:1.13.2-12.el7_2
krb5-server
Red Hat:enterprise_linux:7::client
 before 0:1.13.2-12.el7_2
0:1.13.2-12.el7_2
krb5-server-ldap
Red Hat:enterprise_linux:7::client
 before 0:1.13.2-12.el7_2
0:1.13.2-12.el7_2
krb5
Red Hat:enterprise_linux:7::computenode
 before 0:1.13.2-12.el7_2
0:1.13.2-12.el7_2
krb5-debuginfo
Red Hat:enterprise_linux:7::computenode
 before 0:1.13.2-12.el7_2
0:1.13.2-12.el7_2
krb5-libs
Red Hat:enterprise_linux:7::computenode
 before 0:1.13.2-12.el7_2
0:1.13.2-12.el7_2
krb5-pkinit
Red Hat:enterprise_linux:7::computenode
 before 0:1.13.2-12.el7_2
0:1.13.2-12.el7_2
krb5-workstation
Red Hat:enterprise_linux:7::computenode
 before 0:1.13.2-12.el7_2
0:1.13.2-12.el7_2
krb5-devel
Red Hat:enterprise_linux:7::computenode
 before 0:1.13.2-12.el7_2
0:1.13.2-12.el7_2
krb5-server
Red Hat:enterprise_linux:7::computenode
 before 0:1.13.2-12.el7_2
0:1.13.2-12.el7_2
krb5-server-ldap
Red Hat:enterprise_linux:7::computenode
 before 0:1.13.2-12.el7_2
0:1.13.2-12.el7_2
krb5
Red Hat:enterprise_linux:7::server
 before 0:1.13.2-12.el7_2
0:1.13.2-12.el7_2
krb5-debuginfo
Red Hat:enterprise_linux:7::server
 before 0:1.13.2-12.el7_2
0:1.13.2-12.el7_2
krb5-devel
Red Hat:enterprise_linux:7::server
 before 0:1.13.2-12.el7_2
0:1.13.2-12.el7_2
krb5-libs
Red Hat:enterprise_linux:7::server
 before 0:1.13.2-12.el7_2
0:1.13.2-12.el7_2
krb5-pkinit
Red Hat:enterprise_linux:7::server
 before 0:1.13.2-12.el7_2
0:1.13.2-12.el7_2
krb5-server
Red Hat:enterprise_linux:7::server
 before 0:1.13.2-12.el7_2
0:1.13.2-12.el7_2
krb5-server-ldap
Red Hat:enterprise_linux:7::server
 before 0:1.13.2-12.el7_2
0:1.13.2-12.el7_2
krb5-workstation
Red Hat:enterprise_linux:7::server
 before 0:1.13.2-12.el7_2
0:1.13.2-12.el7_2
krb5
Red Hat:enterprise_linux:7::workstation
 before 0:1.13.2-12.el7_2
0:1.13.2-12.el7_2
krb5-debuginfo
Red Hat:enterprise_linux:7::workstation
 before 0:1.13.2-12.el7_2
0:1.13.2-12.el7_2
krb5-devel
Red Hat:enterprise_linux:7::workstation
 before 0:1.13.2-12.el7_2
0:1.13.2-12.el7_2
krb5-libs
Red Hat:enterprise_linux:7::workstation
 before 0:1.13.2-12.el7_2
0:1.13.2-12.el7_2
krb5-pkinit
Red Hat:enterprise_linux:7::workstation
 before 0:1.13.2-12.el7_2
0:1.13.2-12.el7_2
krb5-server
Red Hat:enterprise_linux:7::workstation
 before 0:1.13.2-12.el7_2
0:1.13.2-12.el7_2
krb5-server-ldap
Red Hat:enterprise_linux:7::workstation
 before 0:1.13.2-12.el7_2
0:1.13.2-12.el7_2
krb5-workstation
Red Hat:enterprise_linux:7::workstation
 before 0:1.13.2-12.el7_2
0:1.13.2-12.el7_2
krb5
SUSE:Linux Enterprise Desktop 12
 before 1.12.1-25.1
1.12.1-25.1
krb5
SUSE:Linux Enterprise Desktop 12 SP1
 before 1.12.1-25.1
1.12.1-25.1
krb5
SUSE:Linux Enterprise Software Development Kit 12
 before 1.12.1-25.1
1.12.1-25.1
krb5
SUSE:Linux Enterprise Software Development Kit 12 SP1
 before 1.12.1-25.1
1.12.1-25.1
krb5
SUSE:Linux Enterprise Server 12
 before 1.12.1-25.1
1.12.1-25.1
krb5
SUSE:Linux Enterprise Server for SAP Applications 12
 before 1.12.1-25.1
1.12.1-25.1
krb5
SUSE:Linux Enterprise Server 12 SP1
 before 1.12.1-25.1
1.12.1-25.1
krb5
SUSE:Linux Enterprise Server for SAP Applications 12 SP1
 before 1.12.1-25.1
1.12.1-25.1
krb5
Ubuntu:14.04:LTS
 before 1.12+dfsg-2ubuntu5.4, plus listed versions
1.10.1+dfsg-6.1ubuntu11.11.3+dfsg-3ubuntu21.12+dfsg-2ubuntu11.12+dfsg-2ubuntu21.12+dfsg-2ubuntu3
Show 6 moreShow less
1.12+dfsg-2ubuntu41.12+dfsg-2ubuntu4.21.12+dfsg-2ubuntu51.12+dfsg-2ubuntu5.11.12+dfsg-2ubuntu5.21.12+dfsg-2ubuntu5.3
1.12+dfsg-2ubuntu5.4
krb5
openSUSE:Tumbleweed
 before 1.15-1.1
1.15-1.1

History

History
WhenChangedSources
2026-11-03aliasesEUVD
2026-11-02createdCVE List, GitHub Advisories, NVD, OSV

References

Show 82 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open