Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2011-0281HistoryFeb 10, 2011 - 6:00 p.m.
CVE-2011-0281
2011-02-1018:00:00
Debian Security Bug Tracker
security-tracker.debian.org
9
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.029 Low
EPSS
Percentile
90.6%
The unparse implementation in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.6.x through 1.9, when an LDAP backend is used, allows remote attackers to cause a denial of service (file descriptor exhaustion and daemon hang) via a principal name that triggers use of a backslash escape sequence, as demonstrated by a \n sequence.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | krb5 | < 1.8.3+dfsg-5 | krb5_1.8.3+dfsg-5_all.deb |
| Debian | 11 | all | krb5 | < 1.8.3+dfsg-5 | krb5_1.8.3+dfsg-5_all.deb |
| Debian | 10 | all | krb5 | < 1.8.3+dfsg-5 | krb5_1.8.3+dfsg-5_all.deb |
| Debian | 999 | all | krb5 | < 1.8.3+dfsg-5 | krb5_1.8.3+dfsg-5_all.deb |
| Debian | 13 | all | krb5 | < 1.8.3+dfsg-5 | krb5_1.8.3+dfsg-5_all.deb |
Related
prion
prion
Code injection
2011-02-10 18:00:00
veracode
veracode
Denial Of Service (DoS)
2020-04-10 00:59:11
cve
cve
CVE-2011-0281
2011-02-10 18:00:00
ubuntucve
ubuntucve
CVE-2011-0281
2011-02-10 00:00:00
openvas
openvas
CentOS Update for krb5-devel CESA-2011:0199 centos5 x86_64
2012-07-30 00:00:00
Oracle: Security Advisory (ELSA-2011-0199)
2015-10-06 00:00:00
RedHat Update for krb5 RHSA-2011:0199-01
2011-02-11 00:00:00
nessus
nessus
SuSE 11.1 Security Update : krb5 (SAT Patch Number 3839)
2011-02-10 00:00:00
Mandriva Linux Security Advisory : krb5 (MDVSA-2011:024)
2011-02-10 00:00:00
Scientific Linux Security Update : krb5 on SL5.x i386/x86_64
2012-08-01 00:00:00
centos
centos
krb5 security update
2011-04-14 23:48:10
securityvulns
securityvulns
MIT Kerberos 5 security vulnerabilities
2011-02-11 00:00:00
redhat
redhat
(RHSA-2011:0199) Important: krb5 security update
2011-02-08 00:00:00
(RHSA-2011:0200) Important: krb5 security update
2011-02-08 00:00:00
oraclelinux
oraclelinux
krb5 security update
2011-02-08 00:00:00
krb5 security update
2011-02-10 00:00:00
threatpost
threatpost
Ubuntu Fixes Kerberos Bug With New Packages
2011-02-15 02:19:05
freebsd
freebsd
krb5 -- MITKRB5-SA-2011-002, KDC vulnerable to hang when using LDAP back end
2011-02-08 00:00:00
ubuntu
ubuntu
Kerberos vulnerabilities
2011-02-15 00:00:00
fedora
fedora
[SECURITY] Fedora 14 Update: krb5-1.8.2-8.fc14
2011-02-18 01:52:10
[SECURITY] Fedora 13 Update: krb5-1.7.1-17.fc13
2011-02-18 01:52:38
[SECURITY] Fedora 13 Update: krb5-1.7.1-18.fc13
2011-03-24 19:27:05
gentoo
gentoo
MIT Kerberos 5: Multiple vulnerabilities
2012-01-23 00:00:00
vmware
vmware
VMware ESXi and ESX updates to third party libraries and ESX Service Console
2011-10-12 00:00:00
VMware ESX third party updates for Service Console packages glibc and dhcp
2011-10-12 00:00:00
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.029 Low
EPSS
Percentile
90.6%
Related for DEBIANCVE:CVE-2011-0281