CVE-2018-5709
An issue was discovered in MIT Kerberos 5 (aka krb5) through 1.16. There is a variable "dbentry-...
CVE-2018-5709 is a high vulnerability (CVSS 7.5) in Mit Kerberos, published January 16, 2018. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.05%, the 81st percentile. Fixed in krb5 1.15.3-r0.
An issue was discovered in MIT Kerberos 5 (aka krb5) through 1.16. There is a variable "dbentry->n_key_data" in kadmin/dbutil/dump.c that can store 16-bit data but unknowingly the developer has assigned a "u4" variable to it, which is for 32-bit data. An attacker can use this vulnerability to affect other artifacts of the database as we know that a Kerberos database dump file contains trusted data.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- High
- Availability
- None
Exploit likelihood
What each source reports
NVD Score used
An issue was discovered in MIT Kerberos 5 (aka krb5) through 1.16. There is a variable "dbentry->n_key_data" in kadmin/dbutil/dump.c that can store 16-bit data but unknowingly the developer has assigned a "u4" variable to it, which is for 32-bit data. An attacker can use this vulnerability to affect other artifacts of the database as we know that a Kerberos database dump file contains trusted data.
- Record
CVE-2018-5709- CVSS 3.0
- 7.5 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N - CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:P/A:N - Weakness
- CWE-190
- Updated
- 2026-11-02
CVE List No score
An issue was discovered in MIT Kerberos 5 (aka krb5) through 1.16. There is a variable "dbentry->n_key_data" in kadmin/dbutil/dump.c that can store 16-bit data but unknowingly the developer has assigned a "u4" variable to it, which is for 32-bit data. An attacker can use this vulnerability to affect other artifacts of the database as we know that a Kerberos database dump file contains trusted data.
- Record
CVE-2018-5709- Updated
- 2026-11-02
EUVDEUVD-2018-17478 No score
An issue was discovered in MIT Kerberos 5 (aka krb5) through 1.16. There is a variable "dbentry->n_key_data" in kadmin/dbutil/dump.c that can store 16-bit data but unknowingly the developer has assigned a "u4" variable to it, which is for 32-bit data. An attacker can use this vulnerability to affect other artifacts of the database as we know that a Kerberos database dump file contains trusted data.
- Record
EUVD-2018-17478- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-9g2q-jwhw-j832
An issue was discovered in MIT Kerberos 5 (aka krb5) through 1.16. There is a variable "dbentry-...
An issue was discovered in MIT Kerberos 5 (aka krb5) through 1.16. There is a variable "dbentry->n_key_data" in kadmin/dbutil/dump.c that can store 16-bit data but unknowingly the developer has assigned a "u4" variable to it, which is for 32-bit data. An attacker can use this vulnerability to affect other artifacts of the database as we know that a Kerberos database dump file contains trusted data.
- Record
GHSA-9g2q-jwhw-j832- CVSS 3.0
- 7.5 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N - Weakness
- CWE-190
- Updated
- 2026-11-02
OSVALPINE-CVE-2018-5709
An issue was discovered in MIT Kerberos 5 (aka krb5) through 1.16. There is a variable "dbentry->n_key_data" in kadmin/dbutil/dump.c that can store 16-bit data but unknowingly the developer has assigned a "u4" variable to it, which is for 32-bit data. An attacker can use this vulnerability to affect other artifacts of the database as we know that a Kerberos database dump file contains trusted data.
- Record
ALPINE-CVE-2018-5709- CVSS 3.0
- 7.5 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N - Updated
- 2026-11-02
OSVBELL-CVE-2018-5709
CVE-2018-5709 does not affect BellSoft software
- Record
BELL-CVE-2018-5709- CVSS 3.0
- 7.5 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N - Updated
- 2026-11-02
Show 4 moreShow less
OSV
An issue was discovered in MIT Kerberos 5 (aka krb5) through 1.16. There is a variable "dbentry->n_key_data" in kadmin/dbutil/dump.c that can store 16-bit data but unknowingly the developer has assigned a "u4" variable to it, which is for 32-bit data. An attacker can use this vulnerability to affect other artifacts of the database as we know that a Kerberos database dump file contains trusted data.
- Record
CVE-2018-5709- CVSS 3.0
- 7.5 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N - Updated
- 2026-11-02
OSVDEBIAN-CVE-2018-5709
An issue was discovered in MIT Kerberos 5 (aka krb5) through 1.16. There is a variable "dbentry->n_key_data" in kadmin/dbutil/dump.c that can store 16-bit data but unknowingly the developer has assigned a "u4" variable to it, which is for 32-bit data. An attacker can use this vulnerability to affect other artifacts of the database as we know that a Kerberos database dump file contains trusted data.
- Record
DEBIAN-CVE-2018-5709- CVSS 3.0
- 7.5 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N - Updated
- 2026-11-02
OSVUBUNTU-CVE-2018-5709
An issue was discovered in MIT Kerberos 5 (aka krb5) through 1.16. There is a variable "dbentry->n_key_data" in kadmin/dbutil/dump.c that can store 16-bit data but unknowingly the developer has assigned a "u4" variable to it, which is for 32-bit data. An attacker can use this vulnerability to affect other artifacts of the database as we know that a Kerberos database dump file contains trusted data.
- Record
UBUNTU-CVE-2018-5709- CVSS 3.0
- 7.5 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N - Updated
- 2026-11-02
OSVROOT-OS-DEBIAN-12-CVE-2018-5709 No score
CVE-2018-5709 in krb5 - Patched by Root
Root has patched CVE-2018-5709 in the krb5 package for Root:Debian:12. Multiple fixed versions available.
- Record
ROOT-OS-DEBIAN-12-CVE-2018-5709- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
krb5Alpine:v3.10 |
before 1.15.3-r0 | 1.15.3-r0 |
krb5Alpine:v3.11 |
before 1.15.3-r0 | 1.15.3-r0 |
krb5Alpine:v3.12 |
before 1.15.3-r0 | 1.15.3-r0 |
krb5Alpine:v3.13 |
before 1.15.3-r0 | 1.15.3-r0 |
krb5Alpine:v3.14 |
before 1.15.3-r0 | 1.15.3-r0 |
krb5Alpine:v3.15 |
before 1.15.3-r0 | 1.15.3-r0 |
krb5Alpine:v3.16 |
before 1.15.3-r0 | 1.15.3-r0 |
krb5Alpine:v3.17 |
before 1.15.3-r0 | 1.15.3-r0 |
krb5Alpine:v3.18 |
before 1.15.3-r0 | 1.15.3-r0 |
krb5Alpine:v3.19 |
before 1.15.3-r0 | 1.15.3-r0 |
Show 18 moreShow less
| Package | Affected | Fixed |
|---|---|---|
krb5Alpine:v3.20 |
before 1.15.3-r0 | 1.15.3-r0 |
krb5Alpine:v3.21 |
before 1.15.3-r0 | 1.15.3-r0 |
krb5Alpine:v3.22 |
before 1.15.3-r0 | 1.15.3-r0 |
krb5Alpine:v3.23 |
before 1.15.3-r0 | 1.15.3-r0 |
krb5Alpine:v3.24 |
before 1.15.3-r0 | 1.15.3-r0 |
krb5Alpine:v3.7 |
before 1.15.3-r0 | 1.15.3-r0 |
krb5Alpine:v3.8 |
before 1.15.3-r0 | 1.15.3-r0 |
krb5Alpine:v3.9 |
before 1.15.3-r0 | 1.15.3-r0 |
krb5Debian:12 |
All versions, plus listed versions 1.20.1-21.20.1-2+deb12u11.20.1-2+deb12u21.20.1-2+deb12u31.20.1-2+deb12u4 Show 18 moreShow less1.20.1-2+deb12u51.20.1-2+loong641.20.1-31.20.1-41.20.1-51.20.1-5.11.20.1-5.1~exp11.20.1-61.21.2-11.21.3-11.21.3-21.21.3-31.21.3-41.21.3-51.22.1-11.22.1-21.22.1-2.11.22.1-3 |
None known |
krb5Debian:13 |
All versions, plus listed versions 1.21.3-51.21.3-5+deb13u11.22.1-11.22.1-21.22.1-2.11.22.1-3 |
None known |
krb5Debian:14 |
All versions, plus listed versions 1.21.3-51.22.1-11.22.1-21.22.1-2.11.22.1-3 |
None known |
krb5Root:Debian:12 |
before 1.20.1-2+deb12u5.aikido.10 | 1.20.1-2+deb12u5.aikido.101.20.1-2+deb12u5.aikido.121.20.1-2+deb12u5.aikido.11 |
rootio-krb5Root:Debian:12 |
before 1.20.1-2+deb12u5.aikido.10 | 1.20.1-2+deb12u5.aikido.101.20.1-2+deb12u5.aikido.121.20.1-2+deb12u5.aikido.11 |
krb5Ubuntu:Pro:14.04:LTS |
All versions, plus listed versions 1.10.1+dfsg-6.1ubuntu11.11.3+dfsg-3ubuntu21.12+dfsg-2ubuntu11.12+dfsg-2ubuntu21.12+dfsg-2ubuntu3 Show 14 moreShow less1.12+dfsg-2ubuntu41.12+dfsg-2ubuntu4.21.12+dfsg-2ubuntu51.12+dfsg-2ubuntu5.11.12+dfsg-2ubuntu5.21.12+dfsg-2ubuntu5.31.12+dfsg-2ubuntu5.41.12+dfsg-2ubuntu5.4+esm11.12+dfsg-2ubuntu5.4+esm21.12+dfsg-2ubuntu5.4+esm31.12+dfsg-2ubuntu5.4+esm41.12+dfsg-2ubuntu5.4+esm51.12+dfsg-2ubuntu5.4+esm61.12+dfsg-2ubuntu5.4+esm7 |
None known |
krb5Ubuntu:Pro:16.04:LTS |
All versions, plus listed versions 1.13.2+dfsg-21.13.2+dfsg-31.13.2+dfsg-41.13.2+dfsg-51.13.2+dfsg-5ubuntu1 Show 11 moreShow less1.13.2+dfsg-5ubuntu21.13.2+dfsg-5ubuntu2.11.13.2+dfsg-5ubuntu2.1+esm11.13.2+dfsg-5ubuntu2.21.13.2+dfsg-5ubuntu2.2+esm11.13.2+dfsg-5ubuntu2.2+esm21.13.2+dfsg-5ubuntu2.2+esm31.13.2+dfsg-5ubuntu2.2+esm41.13.2+dfsg-5ubuntu2.2+esm51.13.2+dfsg-5ubuntu2.2+esm61.13.2+dfsg-5ubuntu2.2+esm7 |
None known |
krb5Ubuntu:Pro:18.04:LTS |
All versions, plus listed versions 1.15.1-21.16-21.16-2build11.16-2ubuntu0.11.16-2ubuntu0.1+esm1 Show 7 moreShow less1.16-2ubuntu0.21.16-2ubuntu0.31.16-2ubuntu0.41.16-2ubuntu0.4+esm11.16-2ubuntu0.4+esm21.16-2ubuntu0.4+esm31.16-2ubuntu0.4+esm5 |
None known |
krb5Ubuntu:20.04:LTS |
All versions, plus listed versions 1.17-61.17-6ubuntu31.17-6ubuntu41.17-6ubuntu4.11.17-6ubuntu4.2 Show 7 moreShow less1.17-6ubuntu4.31.17-6ubuntu4.41.17-6ubuntu4.61.17-6ubuntu4.71.17-6ubuntu4.81.17-6ubuntu4.91.17-6ubuntu4.11 |
None known |
krb5Ubuntu:22.04:LTS |
All versions, plus listed versions 1.18.3-61.18.3-71.19.2-0ubuntu11.19.2-11.19.2-2 Show 9 moreShow less1.19.2-2ubuntu0.11.19.2-2ubuntu0.21.19.2-2ubuntu0.31.19.2-2ubuntu0.41.19.2-2ubuntu0.51.19.2-2ubuntu0.61.19.2-2ubuntu0.71.19.2-2ubuntu0.81.19.2-2ubuntu0.10 |
None known |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD, OSV |
References
github.com/poojamnit/Kerberos-V5-1.16-Vulnerabilities/tree/master/Integer%20Overflow
lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E
nvd.nist.gov/vuln/detail/CVE-2018-5709
security.alpinelinux.org/vuln/CVE-2018-5709