CVE-2012-1014 in Kerberos

Resumen (Inglés)

The process_as_req function in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.10.x before 1.10.3 does not initialize a certain structure member, which allows remote attackers to cause a denial of service (uninitialized pointer dereference and daemon crash) or possibly execute arbitrary code via a malformed AS-REQ request.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Reservar

2012-02-07

Divulgación

2012-08-06

Estado

Confirmado

Voces

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidad	CWE	Exp	Con	CVE
5902	MIT Kerberos kdc_util.c kdc_handle_protected_negotiation desbordamiento de búfer	119	No está definido	Arreglo oficial	CVE-2012-1014

Fuentes

• MITRE
• NVD
• CVE Details