An unspecified third-party database module for the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.10.x allows remote authenticated users to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted request, a different vulnerability than CVE-2013-1418.
CVSS Details
- CVSS 3.1 Base Score: 4.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade krb5-server-ldapUpgrade krb5-workstationUpgrade krb5-serverUpgrade krb5-develUpgrade krb5-libs | Dec 1, 2016 | Nov 17, 2013 |
| Gentoo Linux | — | Upgrade app-crypt/mit-krb5. | Oct 30, 2017 | Nov 17, 2013 |
| Oracle_linux | — | Upgrade krb5-serverUpgrade krb5-libsUpgrade krb5-server-ldapUpgrade krb5-develUpgrade krb5-workstation | Oct 16, 2024 | Nov 16, 2013 |
| Ubuntu | — | Upgrade libk5crypto3Upgrade libkrb5-3Upgrade krb5-admin-serverUpgrade libkadm5srv-mit9Upgrade libkdb5-4Upgrade libkrb5support0Upgrade libkadm5clnt-mit7Upgrade krb5-pkinitUpgrade krb5-kdcUpgrade libkdb5-6Upgrade krb5-userUpgrade libkadm5srv-mit8Upgrade libkadm5clnt-mit9Upgrade libkrad0Upgrade libkdb5-7Upgrade libgssrpc4Upgrade libkadm5clnt-mit8Upgrade krb5-kdc-ldapUpgrade libkadm5srv-mit7Upgrade krb5-otpUpgrade libgssapi-krb5-2 | Nov 8, 2024 | Nov 18, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub