CVE-2016-3119

The process_db_args function in plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c in the LDAP KDB module in kadmind in MIT Kerberos 5 (aka krb5) through 1.13.4 and 1.14.x through 1.14.1 mishandles the DB argument, which allows remote authenticated users to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted request to modify a principal.

• http://lists.opensuse.org/opensuse-updates/2016-04/msg00007.htmlThird Party Advisory
• http://lists.opensuse.org/opensuse-updates/2016-04/msg00055.htmlThird Party Advisory
• http://rhn.redhat.com/errata/RHSA-2016-2591.html
• http://www.securityfocus.com/bid/85392Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1035399Third Party Advisory, VDB Entry
• https://github.com/krb5/krb5/commit/08c642c09c38a9c6454ab43a9b53b2a89b9eef99Patch
• https://lists.debian.org/debian-lts-announce/2018/01/msg00040.html
• http://lists.opensuse.org/opensuse-updates/2016-04/msg00007.htmlThird Party Advisory
• http://lists.opensuse.org/opensuse-updates/2016-04/msg00055.htmlThird Party Advisory
• http://rhn.redhat.com/errata/RHSA-2016-2591.html
• http://www.securityfocus.com/bid/85392Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1035399Third Party Advisory, VDB Entry
• https://github.com/krb5/krb5/commit/08c642c09c38a9c6454ab43a9b53b2a89b9eef99Patch
• https://lists.debian.org/debian-lts-announce/2018/01/msg00040.html

Published

Mar 26, 2016

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-3112client/consumer/cli.py in Pulp before 2.8.3 writes consumer …
• CVE-2016-3113Cross-site scripting (XSS) vulnerability in ovirt-engine all…6.1
• CVE-2016-3114Kallithea before 0.3.2 allows remote authenticated users to …
• CVE-2016-3115Multiple CRLF injection vulnerabilities in session.c in sshd…6.4
• CVE-2016-3116CRLF injection vulnerability in Dropbear SSH before 2016.72 …
• CVE-2016-3118CRLF injection vulnerability in CA API Gateway (formerly Lay…
• CVE-2016-3120The validate_as_request function in kdc_util.c in the Key Di…
• CVE-2016-3124The sanitycheck module in SimpleSAMLphp before 1.14.1 allows…
• CVE-2016-3125The mod_tls module in ProFTPD before 1.3.5b and 1.3.6 before…
• CVE-2016-3126Cross-site scripting (XSS) vulnerability in the Management C…
• CVE-2016-3127An information disclosure vulnerability in the logging imple…
• CVE-2016-3128A spoofing vulnerability in the Core of BlackBerry Enterpris…