CVE-2018-5729
MIT krb5 1.6 or later allows an authenticated kadmin with permission to add principals to an LDAP...
MIT krb5 1.6 or later allows an authenticated kadmin with permission to add principals to an LDAP Kerberos database to cause a denial of service (NULL pointer dereference) or bypass a DN container check by supplying tagged data that is internal to the database module.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- High
- User interaction
- None
What an attacker can affect
- Confidentiality
- Low
- Integrity
- Low
- Availability
- Low
Exploit likelihood
What each source reports
NVD Score used
MIT krb5 1.6 or later allows an authenticated kadmin with permission to add principals to an LDAP Kerberos database to cause a denial of service (NULL pointer dereference) or bypass a DN container check by supplying tagged data that is internal to the database module.
- Record
CVE-2018-5729- CVSS 3.1
- 4.7 Medium
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L - CVSS 2.0
- 6.5 Medium
AV:N/AC:L/Au:S/C:P/I:P/A:P - Weakness
- CWE-476
- Updated
- 2026-11-02
CVE List No score
MIT krb5 1.6 or later allows an authenticated kadmin with permission to add principals to an LDAP Kerberos database to cause a denial of service (NULL pointer dereference) or bypass a DN container check by supplying tagged data that is internal to the database module.
- Record
CVE-2018-5729- Updated
- 2026-11-02
EUVDEUVD-2018-17498 No score
MIT krb5 1.6 or later allows an authenticated kadmin with permission to add principals to an LDAP Kerberos database to cause a denial of service (NULL pointer dereference) or bypass a DN container check by supplying tagged data that is internal to the database module.
- Record
EUVD-2018-17498- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-c28w-559x-wr7v
MIT krb5 1.6 or later allows an authenticated kadmin with permission to add principals to an LDAP...
MIT krb5 1.6 or later allows an authenticated kadmin with permission to add principals to an LDAP Kerberos database to cause a denial of service (NULL pointer dereference) or bypass a DN container check by supplying tagged data that is internal to the database module.
- Record
GHSA-c28w-559x-wr7v- CVSS 3.1
- 4.7 Medium
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L - Weakness
- CWE-476
- Updated
- 2026-11-02
OSVBELL-CVE-2018-5729
CVE-2018-5729 does not affect BellSoft software
- Record
BELL-CVE-2018-5729- CVSS 3.1
- 4.7 Medium
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L - Updated
- 2026-11-02
OSV
MIT krb5 1.6 or later allows an authenticated kadmin with permission to add principals to an LDAP Kerberos database to cause a denial of service (NULL pointer dereference) or bypass a DN container check by supplying tagged data that is internal to the database module.
- Record
CVE-2018-5729- CVSS 3.1
- 4.7 Medium
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L - Updated
- 2026-11-02
Show 9 moreShow less
OSVDEBIAN-CVE-2018-5729
MIT krb5 1.6 or later allows an authenticated kadmin with permission to add principals to an LDAP Kerberos database to cause a denial of service (NULL pointer dereference) or bypass a DN container check by supplying tagged data that is internal to the database module.
- Record
DEBIAN-CVE-2018-5729- CVSS 3.1
- 4.7 Medium
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L - Updated
- 2026-11-02
OSVRHSA-2018:3071
Red Hat Security Advisory: krb5 security, bug fix, and enhancement update
- Record
RHSA-2018:3071- CVSS 3.0
- 4.7 Medium
CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L - Updated
- 2026-11-02
OSVUBUNTU-CVE-2018-5729
MIT krb5 1.6 or later allows an authenticated kadmin with permission to add principals to an LDAP Kerberos database to cause a denial of service (NULL pointer dereference) or bypass a DN container check by supplying tagged data that is internal to the database module.
- Record
UBUNTU-CVE-2018-5729- CVSS 3.1
- 4.7 Medium
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L - CVSS 3.0
- 4.7 Medium
CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L - Updated
- 2026-11-02
OSVMGASA-2018-0155 No score
Updated krb5 packages fix security vulnerabilities
Updated krb5 packages fix security vulnerabilities:
An issue was discovered in MIT Kerberos 5 (aka krb5) through 1.16. The pre-defined function "strlen" is getting a "NULL" string as a parameter value in plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c in the Key Distribution Center (KDC), which allows remote authenticated users to cause a denial of service (NULL pointer dereference) via a modified kadmin client (CVE-2018-5710, CVE-2018-5729, CVE-2018-5730).
- Record
MGASA-2018-0155- Updated
- 2026-11-02
OSVopenSUSE-SU-2019:0139-1 No score
Security update for krb5
This update for krb5 fixes the following issues:
Security issues fixed:
- CVE-2018-5729, CVE-2018-5730: Fixed multiple flaws in LDAP DN checking (bsc#1083926, bsc#1083927)
This update was imported from the SUSE:SLE-15:Update update project.
- Record
openSUSE-SU-2019:0139-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10899-1 No score
krb5-1.19.2-2.2 on GA media
These are all security issues fixed in the krb5-1.19.2-2.2 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10899-1- Updated
- 2026-11-02
OSVSUSE-SU-2018:0846-1 No score
Security update for krb5
This update for krb5 provides the following fixes:
Security issues fixed:
- CVE-2018-5730: DN container check bypass by supplying special crafted data (bsc#1083927).
- CVE-2018-5729: Null pointer dereference in kadmind or DN container check bypass by supplying special crafted data (bsc#1083926).
Non-security issues fixed:
- Make it possible for legacy applications (e.g. SAP Netweaver) to remain compatible with newer Kerberos. System administrators who are experiencing this kind of compatibility issues may set the environment variable GSSAPI_ASSUME_MECH_MATCH to a non-empty value, and make sure the environment variable is visible and effective to the application startup script. (bsc#1057662)
- Fix a GSS failure in legacy applications by not indicating deprecated GSS mechanisms in gss_indicate_mech() list. (bsc#1081725)
- Record
SUSE-SU-2018:0846-1- Updated
- 2026-11-02
OSVSUSE-SU-2018:0859-1 No score
Security update for krb5
This update for krb5 fixes several issues.
This security issue was fixed:
- CVE-2017-11462: Prevent automatic security context deletion to prevent double-free (bsc#1056995).
- CVE-2018-5729: Null pointer dereference in kadmind or DN container check bypass by supplying special crafted data (bsc#1083926).
- CVE-2018-5730: DN container check bypass by supplying special crafted data (bsc#1083927).
This non-security issue was fixed:
- Avoid indefinite polling in KDC communication. (bsc#970696)
- Record
SUSE-SU-2018:0859-1- Updated
- 2026-11-02
OSVSUSE-SU-2019:0175-1 No score
Security update for krb5
This update for krb5 fixes the following issues:
Security issues fixed:
- CVE-2018-5729, CVE-2018-5730: Fixed multiple flaws in LDAP DN checking (bsc#1083926, bsc#1083927)
- Record
SUSE-SU-2019:0175-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
krb5Debian:12 |
before 1.16.1-1 | 1.16.1-1 |
krb5Debian:13 |
before 1.16.1-1 | 1.16.1-1 |
krb5Debian:14 |
before 1.16.1-1 | 1.16.1-1 |
krb5Debian:8 From an advisory covering 4 CVEs |
before 1.12.1+dfsg-19+deb8u5, plus listed versions 1.12.1+dfsg-191.12.1+dfsg-19+deb8u11.12.1+dfsg-19+deb8u21.12.1+dfsg-19+deb8u4 |
1.12.1+dfsg-19+deb8u5 |
krb5Debian:9 From an advisory covering 5 CVEs |
before 1.15-1+deb9u3, plus listed versions 1.15-11.15-1+deb9u11.15-1+deb9u2 |
1.15-1+deb9u3 |
krb5Mageia:6 From an advisory covering 3 CVEs |
before 1.15.1-2.3.mga6 | 1.15.1-2.3.mga6 |
krb5Red Hat:enterprise_linux:7::client From an advisory covering 2 CVEs |
before 0:1.15.1-34.el7 | 0:1.15.1-34.el7 |
krb5-debuginfoRed Hat:enterprise_linux:7::client From an advisory covering 2 CVEs |
before 0:1.15.1-34.el7 | 0:1.15.1-34.el7 |
krb5-libsRed Hat:enterprise_linux:7::client From an advisory covering 2 CVEs |
before 0:1.15.1-34.el7 | 0:1.15.1-34.el7 |
krb5-pkinitRed Hat:enterprise_linux:7::client From an advisory covering 2 CVEs |
before 0:1.15.1-34.el7 | 0:1.15.1-34.el7 |
Show 52 moreShow less
| Package | Affected | Fixed |
|---|---|---|
krb5-workstationRed Hat:enterprise_linux:7::client From an advisory covering 2 CVEs |
before 0:1.15.1-34.el7 | 0:1.15.1-34.el7 |
libkadm5Red Hat:enterprise_linux:7::client From an advisory covering 2 CVEs |
before 0:1.15.1-34.el7 | 0:1.15.1-34.el7 |
krb5-develRed Hat:enterprise_linux:7::client From an advisory covering 2 CVEs |
before 0:1.15.1-34.el7 | 0:1.15.1-34.el7 |
krb5-serverRed Hat:enterprise_linux:7::client From an advisory covering 2 CVEs |
before 0:1.15.1-34.el7 | 0:1.15.1-34.el7 |
krb5-server-ldapRed Hat:enterprise_linux:7::client From an advisory covering 2 CVEs |
before 0:1.15.1-34.el7 | 0:1.15.1-34.el7 |
krb5Red Hat:enterprise_linux:7::computenode From an advisory covering 2 CVEs |
before 0:1.15.1-34.el7 | 0:1.15.1-34.el7 |
krb5-debuginfoRed Hat:enterprise_linux:7::computenode From an advisory covering 2 CVEs |
before 0:1.15.1-34.el7 | 0:1.15.1-34.el7 |
krb5-libsRed Hat:enterprise_linux:7::computenode From an advisory covering 2 CVEs |
before 0:1.15.1-34.el7 | 0:1.15.1-34.el7 |
krb5-pkinitRed Hat:enterprise_linux:7::computenode From an advisory covering 2 CVEs |
before 0:1.15.1-34.el7 | 0:1.15.1-34.el7 |
krb5-workstationRed Hat:enterprise_linux:7::computenode From an advisory covering 2 CVEs |
before 0:1.15.1-34.el7 | 0:1.15.1-34.el7 |
libkadm5Red Hat:enterprise_linux:7::computenode From an advisory covering 2 CVEs |
before 0:1.15.1-34.el7 | 0:1.15.1-34.el7 |
krb5-develRed Hat:enterprise_linux:7::computenode From an advisory covering 2 CVEs |
before 0:1.15.1-34.el7 | 0:1.15.1-34.el7 |
krb5-serverRed Hat:enterprise_linux:7::computenode From an advisory covering 2 CVEs |
before 0:1.15.1-34.el7 | 0:1.15.1-34.el7 |
krb5-server-ldapRed Hat:enterprise_linux:7::computenode From an advisory covering 2 CVEs |
before 0:1.15.1-34.el7 | 0:1.15.1-34.el7 |
krb5Red Hat:enterprise_linux:7::server From an advisory covering 2 CVEs |
before 0:1.15.1-34.el7 | 0:1.15.1-34.el7 |
krb5-debuginfoRed Hat:enterprise_linux:7::server From an advisory covering 2 CVEs |
before 0:1.15.1-34.el7 | 0:1.15.1-34.el7 |
krb5-develRed Hat:enterprise_linux:7::server From an advisory covering 2 CVEs |
before 0:1.15.1-34.el7 | 0:1.15.1-34.el7 |
krb5-libsRed Hat:enterprise_linux:7::server From an advisory covering 2 CVEs |
before 0:1.15.1-34.el7 | 0:1.15.1-34.el7 |
krb5-pkinitRed Hat:enterprise_linux:7::server From an advisory covering 2 CVEs |
before 0:1.15.1-34.el7 | 0:1.15.1-34.el7 |
krb5-serverRed Hat:enterprise_linux:7::server From an advisory covering 2 CVEs |
before 0:1.15.1-34.el7 | 0:1.15.1-34.el7 |
krb5-server-ldapRed Hat:enterprise_linux:7::server From an advisory covering 2 CVEs |
before 0:1.15.1-34.el7 | 0:1.15.1-34.el7 |
krb5-workstationRed Hat:enterprise_linux:7::server From an advisory covering 2 CVEs |
before 0:1.15.1-34.el7 | 0:1.15.1-34.el7 |
libkadm5Red Hat:enterprise_linux:7::server From an advisory covering 2 CVEs |
before 0:1.15.1-34.el7 | 0:1.15.1-34.el7 |
krb5Red Hat:enterprise_linux:7::workstation From an advisory covering 2 CVEs |
before 0:1.15.1-34.el7 | 0:1.15.1-34.el7 |
krb5-debuginfoRed Hat:enterprise_linux:7::workstation From an advisory covering 2 CVEs |
before 0:1.15.1-34.el7 | 0:1.15.1-34.el7 |
krb5-develRed Hat:enterprise_linux:7::workstation From an advisory covering 2 CVEs |
before 0:1.15.1-34.el7 | 0:1.15.1-34.el7 |
krb5-libsRed Hat:enterprise_linux:7::workstation From an advisory covering 2 CVEs |
before 0:1.15.1-34.el7 | 0:1.15.1-34.el7 |
krb5-pkinitRed Hat:enterprise_linux:7::workstation From an advisory covering 2 CVEs |
before 0:1.15.1-34.el7 | 0:1.15.1-34.el7 |
krb5-serverRed Hat:enterprise_linux:7::workstation From an advisory covering 2 CVEs |
before 0:1.15.1-34.el7 | 0:1.15.1-34.el7 |
krb5-server-ldapRed Hat:enterprise_linux:7::workstation From an advisory covering 2 CVEs |
before 0:1.15.1-34.el7 | 0:1.15.1-34.el7 |
krb5-workstationRed Hat:enterprise_linux:7::workstation From an advisory covering 2 CVEs |
before 0:1.15.1-34.el7 | 0:1.15.1-34.el7 |
libkadm5Red Hat:enterprise_linux:7::workstation From an advisory covering 2 CVEs |
before 0:1.15.1-34.el7 | 0:1.15.1-34.el7 |
krb5SUSE:Linux Enterprise Desktop 12 SP2 From an advisory covering 2 CVEs |
before 1.12.5-40.23.2 | 1.12.5-40.23.2 |
krb5SUSE:Linux Enterprise Desktop 12 SP3 From an advisory covering 2 CVEs |
before 1.12.5-40.23.2 | 1.12.5-40.23.2 |
krb5SUSE:Linux Enterprise Server for Raspberry Pi 12 SP2 From an advisory covering 2 CVEs |
before 1.12.5-40.23.2 | 1.12.5-40.23.2 |
krb5SUSE:Linux Enterprise Software Development Kit 12 SP2 From an advisory covering 2 CVEs |
before 1.12.5-40.23.2 | 1.12.5-40.23.2 |
krb5SUSE:Linux Enterprise Software Development Kit 12 SP3 From an advisory covering 2 CVEs |
before 1.12.5-40.23.2 | 1.12.5-40.23.2 |
krb5SUSE:Linux Enterprise Server 12 SP2 From an advisory covering 2 CVEs |
before 1.12.5-40.23.2 | 1.12.5-40.23.2 |
krb5SUSE:Linux Enterprise Server for SAP Applications 12 SP2 From an advisory covering 2 CVEs |
before 1.12.5-40.23.2 | 1.12.5-40.23.2 |
krb5SUSE:Linux Enterprise Server 12 SP3 From an advisory covering 2 CVEs |
before 1.12.5-40.23.2 | 1.12.5-40.23.2 |
krb5SUSE:Linux Enterprise Server for SAP Applications 12 SP3 From an advisory covering 2 CVEs |
before 1.12.5-40.23.2 | 1.12.5-40.23.2 |
krb5SUSE:Linux Enterprise Software Development Kit 11 SP4 From an advisory covering 3 CVEs |
before 1.6.3-133.49.113.7.1 | 1.6.3-133.49.113.7.1 |
krb5SUSE:Linux Enterprise Server 11 SP4 From an advisory covering 3 CVEs |
before 1.6.3-133.49.113.7.1 | 1.6.3-133.49.113.7.1 |
krb5SUSE:Linux Enterprise Server for SAP Applications 11 SP4 From an advisory covering 3 CVEs |
before 1.6.3-133.49.113.7.1 | 1.6.3-133.49.113.7.1 |
krb5SUSE:Linux Enterprise Module for Basesystem 15 From an advisory covering 2 CVEs |
before 1.15.2-6.6.2 | 1.15.2-6.6.2 |
krb5SUSE:Linux Enterprise Module for Server Applications 15 From an advisory covering 2 CVEs |
before 1.15.2-6.6.2 | 1.15.2-6.6.2 |
krb5Ubuntu:14.04:LTS |
before 1.12+dfsg-2ubuntu5.4, plus listed versions 1.10.1+dfsg-6.1ubuntu11.11.3+dfsg-3ubuntu21.12+dfsg-2ubuntu11.12+dfsg-2ubuntu21.12+dfsg-2ubuntu3 Show 6 moreShow less1.12+dfsg-2ubuntu41.12+dfsg-2ubuntu4.21.12+dfsg-2ubuntu51.12+dfsg-2ubuntu5.11.12+dfsg-2ubuntu5.21.12+dfsg-2ubuntu5.3 |
1.12+dfsg-2ubuntu5.4 |
krb5Ubuntu:16.04:LTS |
before 1.13.2+dfsg-5ubuntu2.1, plus listed versions 1.13.2+dfsg-21.13.2+dfsg-31.13.2+dfsg-41.13.2+dfsg-51.13.2+dfsg-5ubuntu11.13.2+dfsg-5ubuntu2 |
1.13.2+dfsg-5ubuntu2.1 |
krb5Ubuntu:18.04:LTS |
before 1.16-2ubuntu0.1, plus listed versions 1.15.1-21.16-21.16-2build1 |
1.16-2ubuntu0.1 |
krb5openSUSE:Leap 15.0 From an advisory covering 2 CVEs |
before 1.15.2-lp150.5.6.1 | 1.15.2-lp150.5.6.1 |
krb5-miniopenSUSE:Leap 15.0 From an advisory covering 2 CVEs |
before 1.15.2-lp150.5.6.1 | 1.15.2-lp150.5.6.1 |
krb5openSUSE:Tumbleweed From an advisory covering 20 CVEs |
before 1.19.2-2.2 | 1.19.2-2.2 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2018-5729 is a medium vulnerability (CVSS 4.7) in Debian Linux, published March 1, 2018. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.58%, the 85th percentile. Fixed in krb5 1.16.1-1.
References
securitytracker.com/id/1042071
bugzilla.redhat.com/show_bug.cgi?id=1551083
github.com/krb5/krb5/commit/e1caf6fb74981da62039846931ebdffed71309d1
access.redhat.com/errata/RHSA-2018:3071
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OIFUL3CPM4S5TOXTTOCQ3CUZN6XCXUTR
bugs.debian.org/cgi-bin/bugreport.cgi?bug=891869
Show 63 moreShow less
lists.debian.org/debian-lts-announce/2019/01/msg00020.html
nvd.nist.gov/vuln/detail/CVE-2018-5729
docs.bell-sw.com/security/cves/CVE-2018-5729
security-tracker.debian.org/tracker/CVE-2018-5729
advisories.mageia.org/MGASA-2018-0155.html
bugs.mageia.org/show_bug.cgi?id=22647
security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_3071.json
cve.org/CVERecord?id=CVE-2018-5729
suse.com/support/update/announcement/2018/suse-su-20180846-1
bugzilla.suse.com/1057662
ubuntu.com/security/CVE-2018-5729
lists.opensuse.org/archives/list/[email protected]/thread/SMD7M4ZIYICJIBXAT2O34XUCDIU6HRBV