CVE-2018-5730: Debian Linux

Low severity, CVSS 3.8. EPSS: 2.2% chance of exploitation in the next 30 days.

MIT krb5 1.6 or later allows an authenticated kadmin with permission to add principals to an LDAP Kerberos database to circumvent a DN containership check by supplying both a "linkdn" and "containerdn" database argument, or by supplying a DN string which is a left extension of a container DN string but is not hierarchically within the container DN.

Affected products

• Debian Debian Linux: version 8.0 only; version 9.0 only
• Fedoraproject Fedora: version 26 only; version 27 only
• Mit Kerberos 5: from 5-1.6, before 5-1.21.2 (fixed in 5-1.21.2)
• Red Hat Enterprise Linux Desktop: version 7.0 only
• Red Hat Enterprise Linux Server: version 7.0 only
• Red Hat Enterprise Linux Workstation: version 7.0 only

Published 2018-03-06. Last modified 2026-06-17.