CVE-2014-5353

Public on 2014-12-16
Modified on 2015-05-05
Description
If kadmind were used with an LDAP back end for the KDC database, a remote, authenticated attacker who has the permissions to set the password policy could crash kadmind by attempting to use a named ticket policy object as a password policy for a principal.
Severity
Medium severity
Medium
See what this means
CVSS v3 Base Score
3.5
See breakdown

Affected Packages

Platform Package Release Date Advisory Status
Amazon Linux 1 krb5 2015-05-05 ALAS-2015-518 Fixed

CVSS Scores

Score Type Score Vector
Amazon Linux CVSSv2 3.5 AV:N/AC:M/Au:S/C:N/I:N/A:P
NVD CVSSv2 3.5 AV:N/AC:M/Au:S/C:N/I:N/A:P

References

FAQs regarding Amazon Linux ALAS/CVE Severity Red Hat: CVE-2014-5353 Mitre: CVE-2014-5353