Memory Leak Vulnerability in MIT Kerberos 5 Affects Remote Authentication

CVE-2015-8631

What is CVE-2015-8631?

A vulnerability exists within the kadmind component of MIT Kerberos 5 that leads to multiple memory leaks. These leaks occur in the kadmin/server/server_stubs.c file, allowing remote authenticated users to trigger significant memory consumption. This can ultimately result in denial of service, impacting the availability of services that rely on Kerberos for authentication. An attacker can exploit this vulnerability by sending a request that specifies a NULL principal name, forcing the system to consume an excessive amount of memory.

References