Out-of-Bounds Read Vulnerability in MIT Kerberos 5 Kadmind

CVE-2015-8629

What is CVE-2015-8629?

The xdr_nullstring function in kadmind within MIT Kerberos 5 fails to properly verify the presence of '\0' characters in input strings. As a result, this flaw can allow remote authenticated users to perform out-of-bounds reads, potentially leading to the unauthorized disclosure of sensitive information or creating conditions that may result in a denial of service.

References