{"id":"CVE-2018-5709","aliases":["ALPINE-CVE-2018-5709","BELL-CVE-2018-5709","DEBIAN-CVE-2018-5709","EUVD-2018-17478","GHSA-9g2q-jwhw-j832","ROOT-OS-DEBIAN-12-CVE-2018-5709","UBUNTU-CVE-2018-5709"],"status":"published","title":"An issue was discovered in MIT Kerberos 5 (aka krb5) through 1.16. There is a variable \"dbentry-...","description":"An issue was discovered in MIT Kerberos 5 (aka krb5) through 1.16. There is a variable \"dbentry-\u003en_key_data\" in kadmin/dbutil/dump.c that can store 16-bit data but unknowingly the developer has assigned a \"u4\" variable to it, which is for 32-bit data. An attacker can use this vulnerability to affect other artifacts of the database as we know that a Kerberos database dump file contains trusted data.","severity":{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.02049,"percentile":0.81372,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-190"],"published":"2018-01-16T09:00:00Z","modified":"2026-10-24T10:30:17Z","fixes":[{"ecosystem":"Alpine:v3.10","package":"krb5","fixed_in":["1.15.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.11","package":"krb5","fixed_in":["1.15.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.12","package":"krb5","fixed_in":["1.15.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.13","package":"krb5","fixed_in":["1.15.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"krb5","fixed_in":["1.15.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"krb5","fixed_in":["1.15.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"krb5","fixed_in":["1.15.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"krb5","fixed_in":["1.15.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"krb5","fixed_in":["1.15.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"krb5","fixed_in":["1.15.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"krb5","fixed_in":["1.15.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"krb5","fixed_in":["1.15.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"krb5","fixed_in":["1.15.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"krb5","fixed_in":["1.15.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"krb5","fixed_in":["1.15.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.7","package":"krb5","fixed_in":["1.15.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.8","package":"krb5","fixed_in":["1.15.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.9","package":"krb5","fixed_in":["1.15.3-r0"],"sources":["osv"]},{"ecosystem":"Root:Debian:12","package":"krb5","fixed_in":["1.20.1-2+deb12u5.aikido.10","1.20.1-2+deb12u5.aikido.12","1.20.1-2+deb12u5.aikido.11"],"sources":["osv"]},{"ecosystem":"Root:Debian:12","package":"rootio-krb5","fixed_in":["1.20.1-2+deb12u5.aikido.10","1.20.1-2+deb12u5.aikido.12","1.20.1-2+deb12u5.aikido.11"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.10","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.11","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.12","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.13","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.7","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.8","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.9","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.3-r0"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.20.1-2","1.20.1-2+deb12u1","1.20.1-2+deb12u2","1.20.1-2+deb12u3","1.20.1-2+deb12u4","1.20.1-2+deb12u5","1.20.1-2+loong64","1.20.1-3","1.20.1-4","1.20.1-5","1.20.1-5.1","1.20.1-5.1~exp1","1.20.1-6","1.21.2-1","1.21.3-1","1.21.3-2","1.21.3-3","1.21.3-4","1.21.3-5","1.22.1-1","1.22.1-2","1.22.1-2.1","1.22.1-3"]},{"source":"osv","ecosystem":"Debian:13","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.21.3-5","1.21.3-5+deb13u1","1.22.1-1","1.22.1-2","1.22.1-2.1","1.22.1-3"]},{"source":"osv","ecosystem":"Debian:14","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.21.3-5","1.22.1-1","1.22.1-2","1.22.1-2.1","1.22.1-3"]},{"source":"osv","ecosystem":"Root:Debian:12","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.1-2+deb12u5.aikido.10"},{"fixed":"1.20.1-2+deb12u5.aikido.12"},{"fixed":"1.20.1-2+deb12u5.aikido.11"}]}]},{"source":"osv","ecosystem":"Root:Debian:12","package":"rootio-krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.1-2+deb12u5.aikido.10"},{"fixed":"1.20.1-2+deb12u5.aikido.12"},{"fixed":"1.20.1-2+deb12u5.aikido.11"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.10.1+dfsg-6.1ubuntu1","1.11.3+dfsg-3ubuntu2","1.12+dfsg-2ubuntu1","1.12+dfsg-2ubuntu2","1.12+dfsg-2ubuntu3","1.12+dfsg-2ubuntu4","1.12+dfsg-2ubuntu4.2","1.12+dfsg-2ubuntu5","1.12+dfsg-2ubuntu5.1","1.12+dfsg-2ubuntu5.2","1.12+dfsg-2ubuntu5.3","1.12+dfsg-2ubuntu5.4","1.12+dfsg-2ubuntu5.4+esm1","1.12+dfsg-2ubuntu5.4+esm2","1.12+dfsg-2ubuntu5.4+esm3","1.12+dfsg-2ubuntu5.4+esm4","1.12+dfsg-2ubuntu5.4+esm5","1.12+dfsg-2ubuntu5.4+esm6","1.12+dfsg-2ubuntu5.4+esm7"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.13.2+dfsg-2","1.13.2+dfsg-3","1.13.2+dfsg-4","1.13.2+dfsg-5","1.13.2+dfsg-5ubuntu1","1.13.2+dfsg-5ubuntu2","1.13.2+dfsg-5ubuntu2.1","1.13.2+dfsg-5ubuntu2.1+esm1","1.13.2+dfsg-5ubuntu2.2","1.13.2+dfsg-5ubuntu2.2+esm1","1.13.2+dfsg-5ubuntu2.2+esm2","1.13.2+dfsg-5ubuntu2.2+esm3","1.13.2+dfsg-5ubuntu2.2+esm4","1.13.2+dfsg-5ubuntu2.2+esm5","1.13.2+dfsg-5ubuntu2.2+esm6","1.13.2+dfsg-5ubuntu2.2+esm7"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.15.1-2","1.16-2","1.16-2build1","1.16-2ubuntu0.1","1.16-2ubuntu0.1+esm1","1.16-2ubuntu0.2","1.16-2ubuntu0.3","1.16-2ubuntu0.4","1.16-2ubuntu0.4+esm1","1.16-2ubuntu0.4+esm2","1.16-2ubuntu0.4+esm3","1.16-2ubuntu0.4+esm5"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.17-6","1.17-6ubuntu3","1.17-6ubuntu4","1.17-6ubuntu4.1","1.17-6ubuntu4.2","1.17-6ubuntu4.3","1.17-6ubuntu4.4","1.17-6ubuntu4.6","1.17-6ubuntu4.7","1.17-6ubuntu4.8","1.17-6ubuntu4.9","1.17-6ubuntu4.11"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.18.3-6","1.18.3-7","1.19.2-0ubuntu1","1.19.2-1","1.19.2-2","1.19.2-2ubuntu0.1","1.19.2-2ubuntu0.2","1.19.2-2ubuntu0.3","1.19.2-2ubuntu0.4","1.19.2-2ubuntu0.5","1.19.2-2ubuntu0.6","1.19.2-2ubuntu0.7","1.19.2-2ubuntu0.8","1.19.2-2ubuntu0.10"]}],"products":[{"vendor":"mit","product":"kerberos"}],"references":[{"url":"https://github.com/poojamnit/Kerberos-V5-1.16-Vulnerabilities/tree/master/Integer%20Overflow","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","advisory","report"]},{"url":"https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-5709"},{"url":"https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772@%3Cdev.mina.apache.org%3E"},{"url":"https://github.com/advisories/GHSA-9g2q-jwhw-j832"},{"url":"https://security.alpinelinux.org/vuln/CVE-2018-5709","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2018-5709","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2018-5709","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2018-5709","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-5709","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2018-5709","description":"An issue was discovered in MIT Kerberos 5 (aka krb5) through 1.16. There is a variable \"dbentry-\u003en_key_data\" in kadmin/dbutil/dump.c that can store 16-bit data but unknowingly the developer has assigned a \"u4\" variable to it, which is for 32-bit data. An attacker can use this vulnerability to affect other artifacts of the database as we know that a Kerberos database dump file contains trusted data.","status":"published","published":"2018-01-16T09:00:00Z","modified":"2024-08-05T05:40:51.202Z","updated_at":"2026-11-02T14:35:01.28843Z"}],"euvd":[{"id":"EUVD-2018-17478","description":"An issue was discovered in MIT Kerberos 5 (aka krb5) through 1.16. There is a variable \"dbentry-\u003en_key_data\" in kadmin/dbutil/dump.c that can store 16-bit data but unknowingly the developer has assigned a \"u4\" variable to it, which is for 32-bit data. An attacker can use this vulnerability to affect other artifacts of the database as we know that a Kerberos database dump file contains trusted data.","status":"published","published":"2018-01-16T09:00:00Z","modified":"2024-08-05T05:40:51Z","updated_at":"2026-11-03T02:40:10.116776Z"}],"ghsa":[{"id":"GHSA-9g2q-jwhw-j832","title":"An issue was discovered in MIT Kerberos 5 (aka krb5) through 1.16. There is a variable \"dbentry-...","description":"An issue was discovered in MIT Kerberos 5 (aka krb5) through 1.16. There is a variable \"dbentry-\u003en_key_data\" in kadmin/dbutil/dump.c that can store 16-bit data but unknowingly the developer has assigned a \"u4\" variable to it, which is for 32-bit data. An attacker can use this vulnerability to affect other artifacts of the database as we know that a Kerberos database dump file contains trusted data.","status":"published","published":"2022-05-13T01:11:38Z","modified":"2023-02-01T05:03:46Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"cwes":["CWE-190"],"updated_at":"2026-11-02T14:50:06.238998Z"}],"nvd":[{"id":"CVE-2018-5709","description":"An issue was discovered in MIT Kerberos 5 (aka krb5) through 1.16. There is a variable \"dbentry-\u003en_key_data\" in kadmin/dbutil/dump.c that can store 16-bit data but unknowingly the developer has assigned a \"u4\" variable to it, which is for 32-bit data. An attacker can use this vulnerability to affect other artifacts of the database as we know that a Kerberos database dump file contains trusted data.","status":"published","published":"2018-01-16T09:29:00.5Z","modified":"2026-06-17T02:00:38.083Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-190"],"updated_at":"2026-11-02T14:04:22.309028Z"}],"osv":[{"id":"ALPINE-CVE-2018-5709","description":"An issue was discovered in MIT Kerberos 5 (aka krb5) through 1.16. There is a variable \"dbentry-\u003en_key_data\" in kadmin/dbutil/dump.c that can store 16-bit data but unknowingly the developer has assigned a \"u4\" variable to it, which is for 32-bit data. An attacker can use this vulnerability to affect other artifacts of the database as we know that a Kerberos database dump file contains trusted data.","status":"published","published":"2018-01-16T09:29:00.5Z","modified":"2026-10-23T17:17:55.274196615Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:27:47.663013Z"},{"id":"BELL-CVE-2018-5709","title":"CVE-2018-5709 does not affect BellSoft software","status":"withdrawn","published":"2023-08-31T12:14:01.963486Z","modified":"2026-01-26T09:48:26.232538Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:28:14.701973Z"},{"id":"CVE-2018-5709","description":"An issue was discovered in MIT Kerberos 5 (aka krb5) through 1.16. There is a variable \"dbentry-\u003en_key_data\" in kadmin/dbutil/dump.c that can store 16-bit data but unknowingly the developer has assigned a \"u4\" variable to it, which is for 32-bit data. An attacker can use this vulnerability to affect other artifacts of the database as we know that a Kerberos database dump file contains trusted data.","status":"published","published":"2018-01-16T09:29:00.5Z","modified":"2026-10-24T10:30:17.832409652Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:44:09.442568Z"},{"id":"DEBIAN-CVE-2018-5709","description":"An issue was discovered in MIT Kerberos 5 (aka krb5) through 1.16. There is a variable \"dbentry-\u003en_key_data\" in kadmin/dbutil/dump.c that can store 16-bit data but unknowingly the developer has assigned a \"u4\" variable to it, which is for 32-bit data. An attacker can use this vulnerability to affect other artifacts of the database as we know that a Kerberos database dump file contains trusted data.","status":"published","published":"2018-01-16T09:29:00.5Z","modified":"2026-10-23T18:03:07.18697169Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:45:30.867575Z"},{"id":"UBUNTU-CVE-2018-5709","description":"An issue was discovered in MIT Kerberos 5 (aka krb5) through 1.16. There is a variable \"dbentry-\u003en_key_data\" in kadmin/dbutil/dump.c that can store 16-bit data but unknowingly the developer has assigned a \"u4\" variable to it, which is for 32-bit data. An attacker can use this vulnerability to affect other artifacts of the database as we know that a Kerberos database dump file contains trusted data.","status":"published","published":"2018-01-16T09:29:00Z","modified":"2026-09-15T08:30:54.457862474Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:54:18.33562Z"},{"id":"ROOT-OS-DEBIAN-12-CVE-2018-5709","title":"CVE-2018-5709 in krb5 - Patched by Root","description":"Root has patched CVE-2018-5709 in the krb5 package for Root:Debian:12. Multiple fixed versions available.","status":"published","published":"2026-10-15T10:03:35Z","modified":"2026-10-15T11:15:05.078901329Z","updated_at":"2026-11-02T15:53:30.44348Z"}]}}