CVE-2013-1418

MEDIO 4.3CVE-2013-1418 · Published 18/11/2013 · updated 16/06/2026

In breve

CVE-2013-1418 è una vulnerabilità MEDIO (CVSS 4.3) che riguarda kerberos 5 (mit).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 5.5%, superiore al 92.8% delle vulnerabilità.
Correzione: aggiornare a 1.10.7 o successiva.

Package	Affected versions	Patched versions
kerberos 5 mit	`< 1.10.7`	`1.10.7`

Description

The setup_server_realm function in main.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.10.7, when multiple realms are configured, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted request.

References

advisories.mageia.org/MGASA-2013-0335.html · Third Party Advisory
krbdev.mit.edu/rt/Ticket/Display.html · Vendor Advisory
lists.opensuse.org/opensuse-updates/2013-11/msg00082.html · Mailing List
lists.opensuse.org/opensuse-updates/2013-11/msg00086.html · Mailing List
lists.opensuse.org/opensuse-updates/2013-12/msg00026.html · Mailing List
web.mit.edu/kerberos/krb5-1.10/README-1.10.7.txt · Vendor Advisory
web.mit.edu/kerberos/krb5-1.11/README-1.11.4.txt · Vendor Advisory
securityfocus.com/bid/63555 · Third Party Advisory
bugzilla.redhat.com/show_bug.cgi · Issue Tracking
krb5/krb5 commit c2ccf41 · Patch
lists.debian.org/debian-lts-announce/2018/01/msg00040.html · Mailing List

Altre vulnerabilità di kerberos 5

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free