CVE-2007-5972

2007-12-0602:46:00

Debian Security Bug Tracker

security-tracker.debian.org

9 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

0.007 Low

EPSS

Percentile

79.5%

JSON

Double free vulnerability in the krb5_def_store_mkey function in lib/kdb/kdb_default.c in MIT Kerberos 5 (krb5) 1.5 has unknown impact and remote authenticated attack vectors. NOTE: the free operations occur in code that stores the krb5kdc master key, and so the attacker must have privileges to store this key.

OSVersionArchitecturePackageVersionFilename
Debian12allkrb5< 1.6.dfsg.4~beta1-1krb5_1.6.dfsg.4~beta1-1_all.deb
Debian11allkrb5< 1.6.dfsg.4~beta1-1krb5_1.6.dfsg.4~beta1-1_all.deb
Debian10allkrb5< 1.6.dfsg.4~beta1-1krb5_1.6.dfsg.4~beta1-1_all.deb
Debian999allkrb5< 1.6.dfsg.4~beta1-1krb5_1.6.dfsg.4~beta1-1_all.deb
Debian13allkrb5< 1.6.dfsg.4~beta1-1krb5_1.6.dfsg.4~beta1-1_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	krb5	< 1.6.dfsg.4~beta1-1	krb5_1.6.dfsg.4~beta1-1_all.deb
Debian	11	all	krb5	< 1.6.dfsg.4~beta1-1	krb5_1.6.dfsg.4~beta1-1_all.deb
Debian	10	all	krb5	< 1.6.dfsg.4~beta1-1	krb5_1.6.dfsg.4~beta1-1_all.deb
Debian	999	all	krb5	< 1.6.dfsg.4~beta1-1	krb5_1.6.dfsg.4~beta1-1_all.deb
Debian	13	all	krb5	< 1.6.dfsg.4~beta1-1	krb5_1.6.dfsg.4~beta1-1_all.deb