CVE-2011-0281
Fixed in a distro release EPSS 4%
The unparse implementation in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.6.x through 1.9, when an LDAP backend is used, allows remote attackers to cause a denial of service (file descriptor exhaustion and daemon hang) via a principal name that triggers use of a backslash escape sequence, as demonstrated by a \n sequence.
Products: mit kerberos, mit kerberos_5
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | krb5 | 1.8.3+dfsg-5 |
| Debian 13 | krb5 | 1.8.3+dfsg-5 |
| Debian 14 | krb5 | 1.8.3+dfsg-5 |
| Red Hat Enterprise Linux 5 | krb5 | 0:1.6.1-55.el5_6.1 |
| Red Hat Enterprise Linux 5 | krb5-debuginfo | 0:1.6.1-55.el5_6.1 |
| Red Hat Enterprise Linux 5 | krb5-devel | 0:1.6.1-55.el5_6.1 |
| Red Hat Enterprise Linux 5 | krb5-libs | 0:1.6.1-55.el5_6.1 |
| Red Hat Enterprise Linux 5 | krb5-server | 0:1.6.1-55.el5_6.1 |
| Red Hat Enterprise Linux 5 | krb5-server-ldap | 0:1.6.1-55.el5_6.1 |
| Red Hat Enterprise Linux 5 | krb5-workstation | 0:1.6.1-55.el5_6.1 |
| Red Hat Enterprise Linux 6 | krb5 | 0:1.8.2-3.el6_0.4 |
| Red Hat Enterprise Linux 6 | krb5-debuginfo | 0:1.8.2-3.el6_0.4 |
| Red Hat Enterprise Linux 6 | krb5-devel | 0:1.8.2-3.el6_0.4 |
| Red Hat Enterprise Linux 6 | krb5-libs | 0:1.8.2-3.el6_0.4 |
| Red Hat Enterprise Linux 6 | krb5-pkinit-openssl | 0:1.8.2-3.el6_0.4 |
| Red Hat Enterprise Linux 6 | krb5-server | 0:1.8.2-3.el6_0.4 |
| Red Hat Enterprise Linux 6 | krb5-server-ldap | 0:1.8.2-3.el6_0.4 |
| Red Hat Enterprise Linux 6 | krb5-workstation | 0:1.8.2-3.el6_0.4 |
| openSUSE Tumbleweed | krb5 | 1.15-1.1 |