CVE-2018-5729: Debian Linux

Medium severity, CVSS 4.7. EPSS: 2.6% chance of exploitation in the next 30 days.

MIT krb5 1.6 or later allows an authenticated kadmin with permission to add principals to an LDAP Kerberos database to cause a denial of service (NULL pointer dereference) or bypass a DN container check by supplying tagged data that is internal to the database module.

Affected products

• Debian Debian Linux: version 8.0 only; version 9.0 only
• Fedoraproject Fedora: version 26 only; version 27 only
• Mit Kerberos 5: from 5-1.6, before 5-1.21.2 (fixed in 5-1.21.2)
• Red Hat Enterprise Linux Desktop: version 7.0 only
• Red Hat Enterprise Linux Server: version 7.0 only
• Red Hat Enterprise Linux Workstation: version 7.0 only

Published 2018-03-06. Last modified 2026-06-17.