KDC Vulnerability in MIT Kerberos 5 Affects Multiple Encryption Types

CVE-2018-20217

What is CVE-2018-20217?

A reachable assertion vulnerability has been identified in the Key Distribution Center (KDC) of MIT Kerberos 5 prior to version 1.17. This flaw can be exploited by an attacker who manages to retrieve a krbtgt ticket using older encryption types, specifically single-DES, triple-DES, or RC4. By initiating an S4U2Self request, the attacker can cause a crash of the KDC, thereby disrupting authentication services. Organizations utilizing MIT Kerberos 5 should address this vulnerability by updating to a newer version as a preventive measure.

References