CVE-2012-1014 in Kerberos
Summary
The process_as_req function in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.10.x before 1.10.3 does not initialize a certain structure member, which allows remote attackers to cause a denial of service (uninitialized pointer dereference and daemon crash) or possibly execute arbitrary code via a malformed AS-REQ request.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.
Reservation
02/07/2012
Disclosure
08/06/2012
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 5902 | MIT Kerberos kdc_util.c kdc_handle_protected_negotiation memory corruption | 119 | Not defined | Official fix | CVE-2012-1014 |