Security Advisory

CVE-2018-20217

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2018-12-26 20:00:00

Last updated 2024-08-05 11:58:19

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

A Reachable Assertion issue was discovered in the KDC in MIT Kerberos 5 (aka krb5) before 1.17. If an attacker can obtain a krbtgt ticket using an older encryption type (single-DES, triple-DES, or RC4), the attacker can crash the KDC by making an S4U2Self request.

← Browse all CVEs View on cve.org ↗