{"action":"Upgrade krb5 to 1.16.1-1 or later.","affected":[{"fixed":"1.16.1-1","introduced":"0"}],"component":"krb5","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:14","exploited":false,"fixed_versions":["1.16.1-1"],"id":"tcs_01M5NDF4KMSFN2CXEWB760KPHW","modified_at":"2026-10-23T18:03:07.184102640Z","published_at":"2018-03-06T20:29:00.657Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2018-5730","https://security-tracker.debian.org/tracker/CVE-2018-5730"],"severity":{"label":"low","score":3.8},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2018-5730#Debian:14/krb5","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2018-5730"}],"summary":"MIT krb5 1.6 or later allows an authenticated kadmin with permission to add principals to an LDAP Kerberos database to circumvent a DN containership check by supplying both a \"linkdn\" and \"containerdn"}