Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2011-0285HistoryApr 15, 2011 - 12:55 a.m.
CVE-2011-0285
2011-04-1500:55:00
Debian Security Bug Tracker
security-tracker.debian.org
10
0.246 Low
EPSS
Percentile
96.6%
The process_chpw_request function in schpw.c in the password-changing functionality in kadmind in MIT Kerberos 5 (aka krb5) 1.7 through 1.9 frees an invalid pointer, which allows remote attackers to execute arbitrary code or cause a denial of service (daemon crash) via a crafted request that triggers an error condition.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | krb5 | <Â 1.9.1+dfsg-1 | krb5_1.9.1+dfsg-1_all.deb |
| Debian | 11 | all | krb5 | <Â 1.9.1+dfsg-1 | krb5_1.9.1+dfsg-1_all.deb |
| Debian | 10 | all | krb5 | <Â 1.9.1+dfsg-1 | krb5_1.9.1+dfsg-1_all.deb |
| Debian | 999 | all | krb5 | <Â 1.9.1+dfsg-1 | krb5_1.9.1+dfsg-1_all.deb |
| Debian | 13 | all | krb5 | <Â 1.9.1+dfsg-1 | krb5_1.9.1+dfsg-1_all.deb |
Related
nessus
nessus
openSUSE Security Update : krb5 (openSUSE-SU-2011:0348-1)
2014-06-13 00:00:00
openSUSE Security Update : krb5 (openSUSE-SU-2011:0348-1)
2011-05-05 00:00:00
RHEL 6 : krb5 (RHSA-2011:0447)
2011-04-15 00:00:00
prion
prion
Design/Logic Flaw
2011-04-15 00:55:00
openvas
openvas
Mandriva Update for krb5 MDVSA-2011:077 (krb5)
2011-04-29 00:00:00
Oracle: Security Advisory (ELSA-2011-0447)
2015-10-06 00:00:00
Mandriva Update for krb5 MDVSA-2011:077 (krb5)
2011-04-29 00:00:00
redhat
redhat
(RHSA-2011:0447) Moderate: krb5 security update
2011-04-14 00:00:00
oraclelinux
oraclelinux
krb5 security update
2011-04-14 00:00:00
securityvulns
securityvulns
MITKRB5-SA-2011-004 kadmind invalid pointer free() [CVE-2011-0285]
2011-04-14 00:00:00
MIT Kerberos 5 memory corruption
2011-04-14 00:00:00
cvelist
cvelist
CVE-2011-0285
2011-04-15 00:00:00
ubuntucve
ubuntucve
CVE-2011-0285
2011-04-14 00:00:00
freebsd
freebsd
krb5 -- MITKRB5-SA-2011-004, kadmind invalid pointer free() [CVE-2011-0285]
2011-04-12 00:00:00
ubuntu
ubuntu
Kerberos vulnerability
2011-04-19 00:00:00
fedora
fedora
[SECURITY] Fedora 15 Update: krb5-1.9-7.fc15
2011-04-15 21:40:36
[SECURITY] Fedora 14 Update: krb5-1.8.2-10.fc14
2011-04-25 20:52:50
[SECURITY] Fedora 13 Update: krb5-1.7.1-19.fc13
2011-04-25 20:58:10
cve
cve
CVE-2011-0285
2011-04-15 00:55:00
gentoo
gentoo
MIT Kerberos 5: Multiple vulnerabilities
2012-01-23 00:00:00