Threats tagged 'ghsa-jvj7-cww2-9jj3'

The AUTH_GSSAPI handler in MIT Kerberos 5 (krb5) version 1.5.2 and later contains a vulnerability that allows remote attackers to cause a denial of service by exhausting memory in the kadmind service. This occurs because repeated failed AUTH_GSSAPI_INIT requests allocate client state that is only freed after a 15-minute timeout, enabling memory accumulation faster than reclamation. The kadmind service is not enabled by default on standard Red Hat Enterprise Linux installations and is typically confined to dedicated Kerberos KDC environments.