Threats tagged 'ghsa-67w6-q7fj-jmqf'

A vulnerability in MIT Kerberos 5's kadmind service allows remote attackers to cause a denial of service by triggering excessive CPU consumption. The flaw occurs because the clean_client() function restarts scanning the client list from the beginning after each removal, resulting in quadratic CPU cost. This affects network-exposed Kerberos administration daemons using AUTH_GSSAPI client entries.