CVSS: 7.5EPSS: 78%CPEs: 23EXPL: 0CVE-2002-2443 – krb5: UDP ping-pong flaw in kpasswd
https://notcve.org/view.php?id=CVE-2002-2443
21 May 2013 — schpw.c in the kpasswd service in kadmind in MIT Kerberos 5 (aka krb5) before 1.11.3 does not properly validate UDP packets before sending responses, which allows remote attackers to cause a denial of service (CPU and bandwidth consumption) via a forged packet that triggers a communication loop, as demonstrated by krb_pingpong.nasl, a related issue to CVE-1999-0103. schpw.c en el servicio kpasswd en kadmind en MIT Kerberos 5 (conocido como krb5) anterior a v1.11.3 no valida correctamente los paquetes UDP an... • http://krbdev.mit.edu/rt/Ticket/Display.html?id=7637 • CWE-20: Improper Input Validation •
CVSS: 6.5EPSS: 94%CPEs: 12EXPL: 0CVE-2013-1416 – krb5: NULL pointer dereference (DoS, KDC crash) by processing certain TGS requests
https://notcve.org/view.php?id=CVE-2013-1416
19 Apr 2013 — The prep_reprocess_req function in do_tgs_req.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.10.5 does not properly perform service-principal realm referral, which allows remote authenticated users to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted TGS-REQ request. La función prep_reprocess_req en do_tgs_req.c en el Key Distribution Center (KDC) en MIT Kerberos 5 (aka krb5) antes de v1.10.5 no realiza correctamente el servicio ámbito de refer... • http://krbdev.mit.edu/rt/Ticket/Display.html?id=7600 • CWE-476: NULL Pointer Dereference •
CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 0CVE-2012-1016 – krb5: PKINIT null pointer deref leads to DoS
https://notcve.org/view.php?id=CVE-2012-1016
03 Mar 2013 — The pkinit_server_return_padata function in plugins/preauth/pkinit/pkinit_srv.c in the PKINIT implementation in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.10.4 attempts to find an agility KDF identifier in inappropriate circumstances, which allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted Draft 9 request. La función pkinit_server_return_padata en plugins/preauth/pkinit/pkinit_srv.c en la implementación PKINIT en el Ke... • http://krbdev.mit.edu/rt/Ticket/Display.html?id=7527 • CWE-476: NULL Pointer Dereference •
CVSS: 7.5EPSS: 7%CPEs: 3EXPL: 0CVE-2013-1415 – krb5: PKINIT null pointer deref leads to DoS (pkinit_check_kdc_pkid())
https://notcve.org/view.php?id=CVE-2013-1415
03 Mar 2013 — The pkinit_check_kdc_pkid function in plugins/preauth/pkinit/pkinit_crypto_openssl.c in the PKINIT implementation in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.10.4 and 1.11.x before 1.11.1 does not properly handle errors during extraction of fields from an X.509 certificate, which allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a malformed KRB5_PADATA_PK_AS_REQ AS-REQ request. La función pkinit_check_kdc_pkid en plugins / PRE... • http://krbdev.mit.edu/rt/Ticket/Display.html?id=7570 • CWE-476: NULL Pointer Dereference •
CVSS: 9.3EPSS: 12%CPEs: 11EXPL: 0CVE-2012-1015 – krb5: KDC daemon crash via free() of an uninitialized pointer
https://notcve.org/view.php?id=CVE-2012-1015
06 Aug 2012 — The kdc_handle_protected_negotiation function in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.8.x, 1.9.x before 1.9.5, and 1.10.x before 1.10.3 attempts to calculate a checksum before verifying that the key type is appropriate for a checksum, which allows remote attackers to execute arbitrary code or cause a denial of service (uninitialized pointer free, heap memory corruption, and daemon crash) via a crafted AS-REQ request. La función kdc_handle_protected_negotiation en Key Distribution... • http://lists.opensuse.org/opensuse-updates/2012-08/msg00016.html • CWE-20: Improper Input Validation •
CVSS: 7.5EPSS: 1%CPEs: 13EXPL: 1CVE-2012-1013 – krb5: kadmind denial of service
https://notcve.org/view.php?id=CVE-2012-1013
07 Jun 2012 — The check_1_6_dummy function in lib/kadm5/srv/svr_principal.c in kadmind in MIT Kerberos 5 (aka krb5) 1.8.x, 1.9.x, and 1.10.x before 1.10.2 allows remote authenticated administrators to cause a denial of service (NULL pointer dereference and daemon crash) via a KRB5_KDB_DISALLOW_ALL_TIX create request that lacks a password. La función check_1_6_dummy en lib/kadm5/srv/svr_principal.c en kadmind en MIT Kerberos 5 (también conocido como krb5) v1.8.x, v1.9.x y v1.10.x antes de v1.10.2 permite provocar una dene... • http://krbdev.mit.edu/rt/Ticket/Display.html?user=guest&pass=guest&id=7152 •
CVSS: 7.8EPSS: 0%CPEs: 5EXPL: 0CVE-2011-4151
https://notcve.org/view.php?id=CVE-2011-4151
20 Oct 2011 — The krb5_db2_lockout_audit function in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.8 through 1.8.4, when the db2 (aka Berkeley DB) back end is used, allows remote attackers to cause a denial of service (assertion failure and daemon exit) via unspecified vectors, a different vulnerability than CVE-2011-1528. La función krb5_db2_lockout_audit en el Centro de distribución de claves (KDC) en MIT Kerberos 5 (krb5) v1.8 a v1.8.4, cuando el DB2 (Berkeley DB) es usado, permite a atacantes remot... • http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2011-006.txt • CWE-20: Improper Input Validation •
CVSS: 7.8EPSS: 50%CPEs: 7EXPL: 0CVE-2011-1529 – krb5: KDC denial of service vulnerabilities (MITKRB5-SA-2011-006)
https://notcve.org/view.php?id=CVE-2011-1529
20 Oct 2011 — The lookup_lockout_policy function in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.8 through 1.8.4 and 1.9 through 1.9.1, when the db2 (aka Berkeley DB) or LDAP back end is used, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via vectors that trigger certain process_as_req errors. La function lookup_lockout_policy function del centro de distribución de claves (“Key Distribution Center” o KDC) en MIT Kerberos 5 (krb5) 1.8 hasta la version ... • http://lists.opensuse.org/opensuse-security-announce/2011-10/msg00009.html • CWE-20: Improper Input Validation •
CVSS: 7.8EPSS: 4%CPEs: 7EXPL: 0CVE-2011-1528 – krb5: KDC denial of service vulnerabilities (MITKRB5-SA-2011-006)
https://notcve.org/view.php?id=CVE-2011-1528
20 Oct 2011 — The krb5_ldap_lockout_audit function in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.8 through 1.8.4 and 1.9 through 1.9.1, when the LDAP back end is used, allows remote attackers to cause a denial of service (assertion failure and daemon exit) via unspecified vectors, related to the locked_check_p function. NOTE: the Berkeley DB vector is covered by CVE-2011-4151. La función krb5_ldap_lockout_audit en el Key Distribution Center (KDC) en MIT Kerberos 5 (también se conoce como krb5) versi... • http://lists.opensuse.org/opensuse-security-announce/2011-10/msg00009.html • CWE-20: Improper Input Validation •
CVSS: 10.0EPSS: 19%CPEs: 7EXPL: 1CVE-2011-0285 – MIT Kerberos 5 - kadmind Change Password Feature Remote Code Execution
https://notcve.org/view.php?id=CVE-2011-0285
15 Apr 2011 — The process_chpw_request function in schpw.c in the password-changing functionality in kadmind in MIT Kerberos 5 (aka krb5) 1.7 through 1.9 frees an invalid pointer, which allows remote attackers to execute arbitrary code or cause a denial of service (daemon crash) via a crafted request that triggers an error condition. La función process_chpw_request de schpw.c en la funcionalidad de cambio de contraseña de kadmind de MIT Kerberos 5 (krb5) 1.7 hasta la 1.9 libera un puntero inválido, lo que permite a ataca... • https://www.exploit-db.com/exploits/35606 • CWE-20: Improper Input Validation •