Threats tagged 'ghsa-7m7r-w6g3-6pph'

A vulnerability in the AUTH_GSSAPI handler of MIT Kerberos 5 (krb5) allows remote attackers to cause a denial of service by exhausting memory in the kadmind service. This occurs because decoded arguments are not freed on certain error paths triggered by crafted AUTH_GSSAPI_INIT requests that fail authentication. The issue affects administrative services processing legacy RPC authentication, but not standard KDC authentication traffic.