CVE-2011-0284 in Kerberosinfo

Summary

Double free vulnerability in the prepare_error_as function in do_as_req.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.7 through 1.9, when the PKINIT feature is enabled, allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via an e_data field containing typed data.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Reservation

01/03/2011

Disclosure

03/19/2011

Entries

1

CPE

ready

CVSS

10.0

EPSS

0.22640

Sources

Do you need the next level of professionalism?

Upgrade your account now!