View at Official suse advisory, NVD, CVE.org · CVE detail
Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.
CVE-2018-5729 severity moderate: SUSE including 400 source package names (0.9.1:krb5-1.12.5-40.23.2, 1.0.0:krb5-1.12.5-40.23.2, …), 531 product×package rows across 79 product lines (Container caasp/v4/default-http-backend, Container caasp/v4/dnsmasq-nanny, … (79 product lines)): Fixed 328, Known Affected 157, Known Not Affected 46.
MIT krb5 1.6 or later allows an authenticated kadmin with permission to add principals to an LDAP Kerberos database to cause a denial of service (NULL pointer dereference) or bypass a DN container check by supplying tagged data that is internal to the database module.