CVE-2011-0282
Fixed in a distro release EPSS 3%
The Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.6.x through 1.9, when an LDAP backend is used, allows remote attackers to cause a denial of service (NULL pointer dereference or buffer over-read, and daemon crash) via a crafted principal name.
Products: mit kerberos, mit kerberos_5
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | krb5 | 1.8.3+dfsg-5 |
| Debian 13 | krb5 | 1.8.3+dfsg-5 |
| Debian 14 | krb5 | 1.8.3+dfsg-5 |
| Red Hat Enterprise Linux 5 | krb5 | 0:1.6.1-55.el5_6.1 |
| Red Hat Enterprise Linux 5 | krb5-debuginfo | 0:1.6.1-55.el5_6.1 |
| Red Hat Enterprise Linux 5 | krb5-devel | 0:1.6.1-55.el5_6.1 |
| Red Hat Enterprise Linux 5 | krb5-libs | 0:1.6.1-55.el5_6.1 |
| Red Hat Enterprise Linux 5 | krb5-server | 0:1.6.1-55.el5_6.1 |
| Red Hat Enterprise Linux 5 | krb5-server-ldap | 0:1.6.1-55.el5_6.1 |
| Red Hat Enterprise Linux 5 | krb5-workstation | 0:1.6.1-55.el5_6.1 |
| Red Hat Enterprise Linux 6 | krb5 | 0:1.8.2-3.el6_0.4 |
| Red Hat Enterprise Linux 6 | krb5-debuginfo | 0:1.8.2-3.el6_0.4 |
| Red Hat Enterprise Linux 6 | krb5-devel | 0:1.8.2-3.el6_0.4 |
| Red Hat Enterprise Linux 6 | krb5-libs | 0:1.8.2-3.el6_0.4 |
| Red Hat Enterprise Linux 6 | krb5-pkinit-openssl | 0:1.8.2-3.el6_0.4 |
| Red Hat Enterprise Linux 6 | krb5-server | 0:1.8.2-3.el6_0.4 |
| Red Hat Enterprise Linux 6 | krb5-server-ldap | 0:1.8.2-3.el6_0.4 |
| Red Hat Enterprise Linux 6 | krb5-workstation | 0:1.8.2-3.el6_0.4 |
| openSUSE Tumbleweed | krb5 | 1.15-1.1 |