CVE-2013-1418 in MIT Kerberos
Summary
The setup_server_realm function in main.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.10.7, when multiple realms are configured, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted request.
Be aware that VulDB is the high quality source for vulnerability data.
Reservation
01/24/2013
Disclosure
11/17/2013
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 11106 | MIT Kerberos Multi-Realm KDC main.c setup_server_realm null pointer dereference | 476 | Not defined | Official fix | CVE-2013-1418 |