CVE-2023-36054

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2023-36054
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-36054.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2023-36054
Downstream
ALPINE (1)
ALSA (1)
AZL (1)
BELL (1)
CLSA (4)
DEBIAN (1)
JLSEC (1)
OESA (5)
openSUSE (1)
RHSA (1)
RLSA (1)
SUSE (5)
UBUNTU (1)
Related
ALSA (1)
openSUSE (1)
SUSE (5)
Published
2023-08-07T00:00:00Z
Modified
2026-10-28T10:33:06Z
Summary
[none]
Details

lib/kadm5/kadm_rpc_xdr.c in MIT Kerberos 5 (aka krb5) before 1.20.2 and 1.21.x before 1.21.1 frees an uninitialized pointer. A remote authenticated user can trigger a kadmind crash. This occurs because _xdr_kadm5_principal_ent_rec does not validate the relationship between n_key_data and the key_data array count.

Database specific 
{
    "cna_assigner": "mitre",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/36xxx/CVE-2023-36054.json"
}
References

Affected packages

Git / github.com/krb5/krb5

Affected ranges

Type
GIT
Repo
https://github.com/krb5/krb5
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
47646c2b98fb17f06e5c46ec1348dd54ad65ef83
Introduced
7efe9fc3551f0e1368fb6b7832161ebad942ed72
Fixed
ef08b09c9459551aabbe7924fb176f1583053cdd
Database specific
Show details 
{
    "extracted_events": [
        {
            "cpe": "cpe:2.3:a:mit:kerberos_5:*:*:*:*:*:*:*:*",
            "range": [
                {
                    "introduced": "0"
                },
                {
                    "fixed": "1.20.2"
                }
            ],
            "source": "CPE_RANGE"
        },
        {
            "cpe": "cpe:2.3:a:mit:kerberos_5:1.21:-:*:*:*:*:*:*",
            "range": [
                {
                    "introduced": "1.21-NA"
                },
                {
                    "last_affected": "1.21-NA"
                }
            ],
            "source": "CPE_STRING"
        },
        {
            "cpe": "cpe:2.3:a:mit:kerberos_5:1.21:beta1:*:*:*:*:*:*",
            "range": [
                {
                    "introduced": "1.21-beta1"
                },
                {
                    "last_affected": "1.21-beta1"
                }
            ],
            "source": "CPE_STRING"
        },
        {
            "range": [
                {
                    "fixed": "ef08b09c9459551aabbe7924fb176f1583053cdd"
                }
            ],
            "source": "REFERENCES_COMMIT"
        }
    ]
}

Affected versions

1.*
1.21-NA
1.21-beta1
krb5-1.*
krb5-1.20-beta1
krb5-1.20-final
krb5-1.20.1-final

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-36054.json"
vanir_signatures 
[
    {
        "deprecated": false,
        "digest": {
            "function_hash": "292458871393797026895224770310205177433",
            "length": 1784
        },
        "id": "CVE-2023-36054-470cf1b5",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://github.com/krb5/krb5/commit/ef08b09c9459551aabbe7924fb176f1583053cdd",
        "target": {
            "file": "src/lib/kadm5/kadm_rpc_xdr.c",
            "function": "_xdr_kadm5_principal_ent_rec"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "334156890665377397254782129423192701014",
                "291711314844331628929990863608957466062",
                "78628825109575425569660732236780644162",
                "261916500496618123580874075940328985736",
                "30376023932640832738304776029120750510",
                "52577924269244501238970656709228176349",
                "142673664801473503695693422137628437538",
                "247089036493975321463435678447079451818",
                "268291072872507344209176579942598505100",
                "283004837450157505273504451698654990402",
                "198860051218332904966840358757088003952",
                "332792275552660967371033837008166398627",
                "181968824239837814858031817203727806594",
                "289882732570170768537025219367137493777"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2023-36054-ea2fc528",
        "signature_type": "Line",
        "signature_version": "v1",
        "source": "https://github.com/krb5/krb5/commit/ef08b09c9459551aabbe7924fb176f1583053cdd",
        "target": {
            "file": "src/lib/kadm5/kadm_rpc_xdr.c"
        }
    }
]
vanir_signatures_modified 
"2026-10-28T10:33:06Z"