Published: 19/04/2013 Updated: 02/02/2021

CVSS v2 Base Score: 4 | Impact Score: 2.9 | Exploitability Score: 8

VMScore: 356

Vector: AV:N/AC:L/Au:S/C:N/I:N/A:P

The prep_reprocess_req function in do_tgs_req.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) prior to 1.10.5 does not properly perform service-principal realm referral, which allows remote authenticated users to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted TGS-REQ request.

Vulnerable Product	Search on Vulmon	Subscribe to Product
mit kerberos 5
opensuse opensuse 11.4
opensuse opensuse 12.1
opensuse opensuse 12.2
opensuse opensuse 12.3
fedoraproject fedora 17
fedoraproject fedora 18
redhat enterprise linux desktop 6.0
redhat enterprise linux eus 6.4
redhat enterprise linux server 6.0
redhat enterprise linux server aus 6.4
redhat enterprise linux workstation 6.0

Synopsis Moderate: krb5 security update Type/Severity Security Advisory: Moderate Topic Updated krb5 packages that fix one security issue are now available forRed Hat Enterprise Linux 6The Red Hat Security Response Team has rated this update as having moderatesecurity impact A Common Vulnerability Scoring ...

Debian Bug report logs - #704775 krb5: KDC TGS-REQ null deref (CVE-2013-1416) Package: krb5-kdc; Maintainer for krb5-kdc is Sam Hartman <hartmans@debianorg>; Source for krb5-kdc is src:krb5 (PTS, buildd, popcon) Reported by: Benjamin Kaduk <kaduk@MITEDU> Date: Fri, 5 Apr 2013 18:36:01 UTC Severity: serious Tags: ...

Several security issues were fixed in Kerberos ...

A NULL pointer dereference flaw was found in the way the MIT Kerberos KDC processed certain TGS (Ticket-granting Server) requests A remote, authenticated attacker could use this flaw to crash the KDC via a specially-crafted TGS request (CVE-2013-1416) ...

The prep_reprocess_req function in do_tgs_reqc in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before 1105 does not properly perform service-principal realm referral, which allows remote authenticated users to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted TGS-REQ request ...

CWE-476 http://krbdev.mit.edu/rt/Ticket/Display.html?id=7600 https://github.com/krb5/krb5/commit/8ee70ec63931d1e38567905387ab9b1d45734d81 http://lists.opensuse.org/opensuse-updates/2013-05/msg00011.html http://rhn.redhat.com/errata/RHSA-2013-0748.html http://lists.opensuse.org/opensuse-updates/2013-06/msg00041.html http://lists.opensuse.org/opensuse-updates/2013-06/msg00102.html http://www.mandriva.com/security/advisories?name=MDVSA-2013:158 http://www.mandriva.com/security/advisories?name=MDVSA-2013:157 http://lists.fedoraproject.org/pipermail/package-announce/2013-April/102074.html http://lists.fedoraproject.org/pipermail/package-announce/2013-April/102058.html https://access.redhat.com/errata/RHSA-2013:0748 https://usn.ubuntu.com/2310-1/https://nvd.nist.gov https://access.redhat.com/security/cve/cve-2013-1416

CVE-2013-1416

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect