Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2013-1417
HistoryNov 20, 2013 - 2:12 p.m.

CVE-2013-1417

2013-11-2014:12:00
CWE-20
[email protected]
web.nvd.nist.gov
30
mit kerberos 5
kdc
denial of service
cve-2013-1417
nvd
security vulnerability

5.9 Medium

AI Score

Confidence

Low

3.5 Low

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:S/C:N/I:N/A:P

0.033 Low

EPSS

Percentile

91.3%

JSON

do_tgs_req.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.11 before 1.11.4, when a single-component realm name is used, allows remote authenticated users to cause a denial of service (daemon crash) via a TGS-REQ request that triggers an attempted cross-realm referral for a host-based service principal.

Related

nessus 5
fedora 7
prion 1
debiancve 1
f5 4
checkpoint_advisories 1
ubuntucve 1
mageia 1
openvas 9
gentoo 1
nessus
nessus
Fedora 20 : krb5-1.11.3-32.fc20 (2013-21456)
2013-11-19 00:00:00
openSUSE Security Update : krb5 (openSUSE-SU-2013:1833-1)
2014-06-13 00:00:00
Oracle Solaris Third-Party Patch Update : kerberos (multiple_vulnerabilities_in_kerberos1)
2015-01-19 00:00:00
fedora
fedora
[SECURITY] Fedora 20 Update: krb5-1.11.3-32.fc20
2013-11-18 21:07:55
[SECURITY] Fedora 19 Update: krb5-1.11.3-13.fc19
2013-12-03 10:37:37
[SECURITY] Fedora 20 Update: krb5-1.11.5-10.fc20
2014-08-07 15:32:53
prion
prion
Design/Logic Flaw
2013-11-20 14:12:00
debiancve
debiancve
CVE-2013-1417
2013-11-20 14:12:00
f5
f5
K15783 : Kerberos vulnerability CVE-2013-1417
2014-11-03 00:00:00
SOL15783 - Kerberos vulnerability CVE-2013-1417
2014-11-03 00:00:00
SOL15784 - Kerberos vulnerability CVE-2013-1418
2014-11-03 00:00:00
checkpoint_advisories
checkpoint_advisories
Kerberos Cross-Realm Referrals KDC NULL Pointer Dereference Denial of Service (CVE-2013-1417)
2014-03-11 00:00:00
ubuntucve
ubuntucve
CVE-2013-1417
2013-11-20 00:00:00
mageia
mageia
Updated krb5 package fixes security vulnerabilities
2013-11-21 00:41:07
openvas
openvas
Mageia: Security Advisory (MGASA-2013-0336)
2022-01-28 00:00:00
Fedora Update for krb5 FEDORA-2013-21786
2013-12-04 00:00:00
Fedora Update for krb5 FEDORA-2013-21786
2013-12-04 00:00:00
gentoo
gentoo
MIT Kerberos 5: Multiple vulnerabilities
2013-12-16 00:00:00

5.9 Medium

AI Score

Confidence

Low

3.5 Low

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:S/C:N/I:N/A:P

0.033 Low

EPSS

Percentile

91.3%

JSON
Related for CVE-2013-1417
nessus5fedora7prion1debiancve1f54checkpoint_advisories1ubuntucve1mageia1openvas9gentoo1