# CVE-2018-5729: krb5-admin-server: MIT krb5 1.6 or later allows an authenticated kadmin with permission to add principals to an LDAP Kerberos database t...

CVE-2018-5729 is fixed in 20 products on 1 platform, first by krb5-admin-server 1.16-2ubuntu0.1, released March 6, 2018. It is not reported as exploited. Patch Radar priority: Routine.

- Web page: https://patchblox.com/security/cve/CVE-2018-5729
- Priority: Routine
- CVSS: n/a (Low)
- EPSS: 0.0258
- CISA KEV: not listed
- Exploited (vendor report): no
- Publicly disclosed: no
- Published: Mar 6, 2018

## Description

MIT krb5 1.6 or later allows an authenticated kadmin with permission to add principals to an LDAP Kerberos database to cause a denial of service (NULL pointer dereference) or bypass a DN container check by supplying tagged data that is internal to the database module.

## Where it's fixed

| Platform | Product | Fixed in | Fix | Released |
|---|---|---|---|---|
| Linux | krb5-admin-server Ubuntu 18.04.6 LTS (bionic) | 1.16-2ubuntu0.1 | [krb5-admin-server 1.16-2ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-krb5-admin-server-1.16-2ubuntu0.1.md) | Mar 6, 2018 |
| Linux | krb5-gss-samples Ubuntu 18.04.6 LTS (bionic) | 1.16-2ubuntu0.1 | [krb5-gss-samples 1.16-2ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-krb5-gss-samples-1.16-2ubuntu0.1.md) | Mar 6, 2018 |
| Linux | krb5-k5tls Ubuntu 18.04.6 LTS (bionic) | 1.16-2ubuntu0.1 | [krb5-k5tls 1.16-2ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-krb5-k5tls-1.16-2ubuntu0.1.md) | Mar 6, 2018 |
| Linux | krb5-kdc Ubuntu 18.04.6 LTS (bionic) | 1.16-2ubuntu0.1 | [krb5-kdc 1.16-2ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-krb5-kdc-1.16-2ubuntu0.1.md) | Mar 6, 2018 |
| Linux | krb5-kdc-ldap Ubuntu 18.04.6 LTS (bionic) | 1.16-2ubuntu0.1 | [krb5-kdc-ldap 1.16-2ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-krb5-kdc-ldap-1.16-2ubuntu0.1.md) | Mar 6, 2018 |
| Linux | krb5-kpropd Ubuntu 18.04.6 LTS (bionic) | 1.16-2ubuntu0.1 | [krb5-kpropd 1.16-2ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-krb5-kpropd-1.16-2ubuntu0.1.md) | Mar 6, 2018 |
| Linux | krb5-locales Ubuntu 18.04.6 LTS (bionic) | 1.16-2ubuntu0.1 | [krb5-locales 1.16-2ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-krb5-locales-1.16-2ubuntu0.1.md) | Mar 6, 2018 |
| Linux | krb5-multidev Ubuntu 18.04.6 LTS (bionic) | 1.16-2ubuntu0.1 | [krb5-multidev 1.16-2ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-krb5-multidev-1.16-2ubuntu0.1.md) | Mar 6, 2018 |
| Linux | krb5-otp Ubuntu 18.04.6 LTS (bionic) | 1.16-2ubuntu0.1 | [krb5-otp 1.16-2ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-krb5-otp-1.16-2ubuntu0.1.md) | Mar 6, 2018 |
| Linux | krb5-pkinit Ubuntu 18.04.6 LTS (bionic) | 1.16-2ubuntu0.1 | [krb5-pkinit 1.16-2ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-krb5-pkinit-1.16-2ubuntu0.1.md) | Mar 6, 2018 |
| Linux | krb5-user Ubuntu 18.04.6 LTS (bionic) | 1.16-2ubuntu0.1 | [krb5-user 1.16-2ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-krb5-user-1.16-2ubuntu0.1.md) | Mar 6, 2018 |
| Linux | libgssapi-krb5-2 Ubuntu 18.04.6 LTS (bionic) | 1.16-2ubuntu0.1 | [libgssapi-krb5-2 1.16-2ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libgssapi-krb5-2-1.16-2ubuntu0.1.md) | Mar 6, 2018 |
| Linux | libgssrpc4 Ubuntu 18.04.6 LTS (bionic) | 1.16-2ubuntu0.1 | [libgssrpc4 1.16-2ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libgssrpc4-1.16-2ubuntu0.1.md) | Mar 6, 2018 |
| Linux | libk5crypto3 Ubuntu 18.04.6 LTS (bionic) | 1.16-2ubuntu0.1 | [libk5crypto3 1.16-2ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libk5crypto3-1.16-2ubuntu0.1.md) | Mar 6, 2018 |
| Linux | libkadm5clnt-mit11 Ubuntu 18.04.6 LTS (bionic) | 1.16-2ubuntu0.1 | [libkadm5clnt-mit11 1.16-2ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libkadm5clnt-mit11-1.16-2ubuntu0.1.md) | Mar 6, 2018 |
| Linux | libkadm5srv-mit11 Ubuntu 18.04.6 LTS (bionic) | 1.16-2ubuntu0.1 | [libkadm5srv-mit11 1.16-2ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libkadm5srv-mit11-1.16-2ubuntu0.1.md) | Mar 6, 2018 |
| Linux | libkdb5-9 Ubuntu 18.04.6 LTS (bionic) | 1.16-2ubuntu0.1 | [libkdb5-9 1.16-2ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libkdb5-9-1.16-2ubuntu0.1.md) | Mar 6, 2018 |
| Linux | libkrad0 Ubuntu 18.04.6 LTS (bionic) | 1.16-2ubuntu0.1 | [libkrad0 1.16-2ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libkrad0-1.16-2ubuntu0.1.md) | Mar 6, 2018 |
| Linux | libkrb5-3 Ubuntu 18.04.6 LTS (bionic) | 1.16-2ubuntu0.1 | [libkrb5-3 1.16-2ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libkrb5-3-1.16-2ubuntu0.1.md) | Mar 6, 2018 |
| Linux | libkrb5support0 Ubuntu 18.04.6 LTS (bionic) | 1.16-2ubuntu0.1 | [libkrb5support0 1.16-2ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libkrb5support0-1.16-2ubuntu0.1.md) | Mar 6, 2018 |

---

Data as of 2026-11-07T12:40:37Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo
