CVE-2023-36054

lib/kadm5/kadm_rpc_xdr.c in MIT Kerberos 5 (aka krb5) before 1.20.2 and 1.21.x before 1.21.1 frees an uninitialized pointer. A remote authenticated user can trigger a kadmind crash. This occurs because _xdr_kadm5_principal_ent_rec does not validate the relationship between n_key_data and the key_data array count.

• CWE-824

• https://github.com/krb5/krb5/commit/ef08b09c9459551aabbe7924fb176f1583053cddPatch
• https://github.com/krb5/krb5/compare/krb5-1.20.1-final...krb5-1.20.2-finalPatch
• https://github.com/krb5/krb5/compare/krb5-1.21-final...krb5-1.21.1-finalPatch
• https://lists.debian.org/debian-lts-announce/2023/10/msg00031.htmlMailing List, Third Party Advisory
• https://security.netapp.com/advisory/ntap-20230908-0004/Third Party Advisory
• https://web.mit.edu/kerberos/www/advisories/Product
• https://github.com/krb5/krb5/commit/ef08b09c9459551aabbe7924fb176f1583053cddPatch
• https://github.com/krb5/krb5/compare/krb5-1.20.1-final...krb5-1.20.2-finalPatch
• https://github.com/krb5/krb5/compare/krb5-1.21-final...krb5-1.21.1-finalPatch
• https://lists.debian.org/debian-lts-announce/2023/10/msg00031.htmlMailing List, Third Party Advisory
• https://security.netapp.com/advisory/ntap-20230908-0004/Third Party Advisory
• https://web.mit.edu/kerberos/www/advisories/Product

Published

Aug 7, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-36047Windows Authentication Elevation of Privilege Vulnerability7.8
• CVE-2023-36049.NET, .NET Framework, and Visual Studio Elevation of Privile…9.8
• CVE-2023-3605A vulnerability was found in PHPGurukul Online Shopping Port…9.1
• CVE-2023-36050Microsoft Exchange Server Spoofing Vulnerability8
• CVE-2023-36052Azure CLI REST Command Information Disclosure Vulnerability8.6
• CVE-2023-36053In Django 3.2 before 3.2.20, 4 before 4.1.10, and 4.2 before…7.5
• CVE-2023-3606A vulnerability was found in TamronOS up to 20230703. It has…8.8
• CVE-2023-3607A vulnerability was found in kodbox 1.26. It has been declar…8
• CVE-2023-36076SQL Injection vulnerability in smanga version 3.1.9 and earl…9.8
• CVE-2023-3608A vulnerability was found in Ruijie BCR810W 2.5.10. It has b…8.8
• CVE-2023-36081Cross Site Scripting vulnerability in GatesAIr Flexiva FM Tr…5.4
• CVE-2023-36082An isssue in GatesAIr Flexiva FM Transmitter/Exiter Fax 150W…9.8