CVE-2003-0082
Fixed in a distro release EPSS 3%
The Key Distribution Center (KDC) in Kerberos 5 (krb5) 1.2.7 and earlier allows remote, authenticated attackers to cause a denial of service (crash) on KDCs within the same realm using a certain protocol request that causes the KDC to corrupt its heap (aka "buffer underrun").
Products: mit kerberos, mit kerberos_5
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | krb5 | 1.3.3-2 |
| Debian 13 | krb5 | 1.3.3-2 |
| Debian 14 | krb5 | 1.3.3-2 |
| Debian 3.0 | krb5 | 1.2.4-5woody4 |