CVE & CISA-KEV Catalog

CVE-2014-5354

LOWEPSS 75th pctl

3.5

CVSS v2

Description

plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c in MIT Kerberos 5 (aka krb5) 1.12.x and 1.13.x before 1.13.1, when the KDC uses LDAP, allows remote authenticated users to cause a denial of service (NULL pointer dereference and daemon crash) by creating a database entry for a keyless principal, as demonstrated by a kadmin "add_principal -nokey" or "purgekeys -all" command.

How to fix

Remediation Available

krb5Debian

Fixed in:1.12.1+dfsg-16CVE-2014-5354

Fixed in:1.12.1+dfsg-16CVE-2014-5354

Fixed in:1.12.1+dfsg-16CVE-2014-5354

Fixed in:1.12.1+dfsg-16CVE-2014-5354

krb5Ubuntu

Fixed in:1.12+dfsg-2ubuntu5.1USN-2498-1

krb5-admin-serverUbuntu

Fixed in:1.12+dfsg-2ubuntu5.1USN-2498-1

krb5-kdcUbuntu

Fixed in:1.12+dfsg-2ubuntu5.1USN-2498-1

krb5-kdc-ldapUbuntu

Fixed in:1.12+dfsg-2ubuntu5.1USN-2498-1

krb5-otpUbuntu

Fixed in:1.12+dfsg-2ubuntu5.1USN-2498-1

krb5-pkinitUbuntu

Fixed in:1.12+dfsg-2ubuntu5.1USN-2498-1

krb5-userUbuntu

Fixed in:1.12+dfsg-2ubuntu5.1USN-2498-1

libgssapi-krb5-2Ubuntu

Fixed in:1.12+dfsg-2ubuntu5.1USN-2498-1

libgssrpc4Ubuntu

Fixed in:1.12+dfsg-2ubuntu5.1USN-2498-1

libk5crypto3Ubuntu

Fixed in:1.12+dfsg-2ubuntu5.1USN-2498-1

libkadm5clnt-mit9Ubuntu

Fixed in:1.12+dfsg-2ubuntu5.1USN-2498-1

libkadm5srv-mit8Ubuntu

Fixed in:1.12+dfsg-2ubuntu5.1USN-2498-1

libkadm5srv-mit9Ubuntu

Fixed in:1.12+dfsg-2ubuntu5.1USN-2498-1

libkdb5-7Ubuntu

Fixed in:1.12+dfsg-2ubuntu5.1USN-2498-1

libkrad0Ubuntu

Fixed in:1.12+dfsg-2ubuntu5.1USN-2498-1

libkrb5-3Ubuntu

Fixed in:1.12+dfsg-2ubuntu5.1USN-2498-1

libkrb5support0Ubuntu

Fixed in:1.12+dfsg-2ubuntu5.1USN-2498-1

Remediation is compiled from vendor and distribution security advisories. Always confirm against the linked source for your exact version and platform.

CVSS v2 Vector

No CVSS vector data available.

Exploit Intelligence

1.74%probability of exploitation in 30 days

75thpercentile

Elevated risk: more likely to be exploited than 75% of all known CVEs.

References

Other references5

Embed a live status badge for CVE-2014-5354

Markdown

[![CVE-2014-5354](https://tridentstack.com/cve/badge/CVE-2014-5354.svg)](https://tridentstack.com/cve/CVE-2014-5354)

HTML

<a href="https://tridentstack.com/cve/CVE-2014-5354"><img src="https://tridentstack.com/cve/badge/CVE-2014-5354.svg" alt="CVE-2014-5354"></a>

Find and fix vulnerabilities across your fleet

TridentStack Control continuously scans your Windows, macOS, and Linux fleet for known vulnerabilities, prioritizes them by severity and active exploitation, and patches them automatically.

This product uses NVD data but is not endorsed or certified by the NVD. EPSS scores courtesy of FIRST.org (https://www.first.org/epss). Source: CISA KEV Catalog. Data as of 2026-05-06.