Lucene search

FreeBSD86B8B655-4D1A-11DF-83FB-0015587E2CC1

HistoryApr 20, 2010 - 12:00 a.m.

krb5 -- KDC double free vulnerability

2010-04-2000:00:00

vuxml.freebsd.org

4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:N/A:P

0.065 Low

EPSS

Percentile

93.7%

JSON

The MIT Kerberos team reports:

An authenticated remote attacker can crash the KDC by
inducing the KDC to perform a double free. Under some
circumstances on some platforms, this could also allow
malicious code execution.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchkrb5= 1.7UNKNOWN
FreeBSDanynoarchkrb5< 1.7.2UNKNOWN

OS	Version	Architecture	Package	Version	Filename
FreeBSD	any	noarch	krb5	= 1.7	UNKNOWN
FreeBSD	any	noarch	krb5	< 1.7.2	UNKNOWN

References

web.mit.edu/kerberos/advisories/MITKRB5-SA-2010-004.txt

4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:N/A:P

0.065 Low

EPSS

Percentile

93.7%

JSON

Related for 86B8B655-4D1A-11DF-83FB-0015587E2CC1