Approved changes feed: RSS · Atom

cpe:2.3:a:mit:kerberos_5:1.12.4:*:*:*:*:*:*:*

part: a version: 1.12.4 update: *

VendorMit (82b7f5d9-694f-5ac9-86aa-26958677636b)
ProductKerberos 5 (774ea4a1-4fda-5d25-92ac-c66a6356a1e3)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/krb5/krb5 purl2cpe 2026-06-01 10:16:02.475420
pkg:rpm/fedora/krb5 purl2cpe 2026-06-01 10:16:02.475422

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2015-8630 vulnerable 2026-06-08 05:07:04.562230 Details available
The (1) kadm5_create_principal_3 and (2) kadm5_modify_principal functions in lib/kadm5/srv/svr_principal.c in kadmind in MIT Kerberos 5 (aka krb5) 1.12.x and 1.13.x before 1.13.4 and 1.14.x before 1.14.1 allow remote authenticated users to cause a denial of service (NULL pointer dereference and daemon crash) by specifying KADM5_POLICY with a NULL policy name.
Published: 2016-02-13T02:00:00.000Z
Updated: 2024-08-06T08:20:43.695Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.